Wago

852-1505 - Switch Wago - Free user manual and instructions

Find the device manual for free 852-1505 Wago in PDF.

📄 358 pages English EN Download 💬 AI Question 10 questions ⚙️ Specs
Notice Wago 852-1505 - page 21
Pick your language and provide your email: we'll send you a specifically translated version.
Product TypeIndustrial Managed Ethernet Switch
Model852-1505
Dimensions (W x H x D)50 mm x 120 mm x 162 mm
Weight970 g
Degree of ProtectionIP30
Power SupplyDC 48 … 57 V, max. 18 W (without PoE), max. 258 W (with PoE+)
Ports8 x 10/100/1000BASE-T (PoE+), 4 x SFP (1000BASE-SX/LX), 1 x RS-232 (RJ-45 console)
PoE+ Power per PortUp to 30 W
MAC Table SizeUp to 16,000 addresses
VLAN SupportPort-based and tag-based, up to 4094 VIDs
Jumbo Frame Size10 kB
Redundant Power SupplyYes (via RPS terminal)
Alarm ContactYes (potential-free, configurable via DIP switches)
Management InterfacesWeb-based (WBM), Telnet, CLI (console), SNMP, MODBUS/TCP
Redundancy ProtocolsSTP, RSTP, MSTP, Xpress Ring, Jet Ring, ERPS, Dual Ring, Dual Homing
Security Features802.1X, Port Security, ACL, DHCP Snooping, ARP Inspection, IP Source Guard
Operating Temperature-40 °C … +70 °C
Storage Temperature-40 °C … +80 °C
Relative Humidity95% (non-condensing)
MountingDIN rail (carrier rail) mounting
CleaningClean housing and contacts with propanol; do not use contact spray
Safety PrecautionsLaser class 1; do not open device; use in locked cabinets; observe ESD precautions
ApprovalsPending: UL 61010-2-201, CE, FCC Part 15 Class A

Frequently Asked Questions - 852-1505 Wago

How do I connect power to the Wago 852-1505 switch?
Use the supplied 6-pin female connector. Connect the primary DC supply to the +PWR and -PWR terminals (48-57 VDC). Optionally connect a redundant supply to +RPS and -RPS. The female connector plugs into the male header on top of the switch.
What is the maximum PoE+ power per port?
Each of the 8 RJ-45 ports supports Power over Ethernet+ (PoE+) up to 30 W per port, compliant with IEEE 802.3at.
How can I reset the switch to factory defaults?
Press the Reset button on the front panel for about 2 seconds and release. The switch will restart. Use a straightened paper clip or similar tool to press the button.
What management interfaces are available?
You can manage the switch via Web Browser (WBM), Telnet, CLI over console port, SNMP, and MODBUS/TCP. The default IP address for web access is 192.168.1.1 (adjustable).
How do I configure VLANs on this switch?
In the Web-Based Management (WBM), go to Advanced Settings > VLAN. You can create port-based or tag-based VLANs (up to 4094 VIDs). Use the VLAN Settings, Tag Settings, and Port Settings tabs to assign ports and configure tagging.
What redundancy protocols does the switch support?
The switch supports STP, RSTP, MSTP, Xpress Ring, Jet Ring, ERPS, Dual Ring, and Dual Homing. These can be configured in the Advanced Settings section of the WBM.
Can I use SFP modules for fiber optic connections?
Yes, the switch has 4 SFP slots supporting 1000BASE-SX/LX modules. Insert the SFP module, then connect the fiber cable. Ensure the connector snaps audibly.
What are the LED indicators on the front panel?
The front panel has PWR (green for primary power), RPS (green for redundant power), ALM (red for alarms), POST (flashing during self-test, solid green when OK), and port LEDs (1000M and 10/100M) that show link and activity.
How do I set up the alarm contact?
Connect the external alarm device to the ALM terminals on the power connector. Configure which events trigger the alarm via the DIP switches on top of the switch: set DIP for PWR, RPS, or specific ports to ON to enable alarm monitoring.
What is the recommended cleaning procedure?
Clean the housing and contacts with propanol only. Do not use contact spray or any cleaning agents that may leave insulating residues. Ensure the device is powered off before cleaning.

User questions about 852-1505 Wago

0 question about this device. Answer the ones you know or ask your own.

Ask a new question about this device

The email remains private: it is only used to notify you if someone responds to your question.

No questions yet. Be the first to ask one.

Download the instructions for your Switch in PDF format for free! Find your manual 852-1505 - Wago and take your electronic device back in hand. On this page are published all the documents necessary for the use of your device. 852-1505 by Wago.

USER MANUAL 852-1505 Wago

WAGO ETHERNET Accessories 852

Wago 852-1505 - WAGO ETHERNET Accessories 852 - 1

natural_image Exterior view of a black network switch with multiple ports and an attached terminal (no visible text or symbols)

852-1505

8-Port 1000BASE-T;4-Slot 1000BASE-SX/LX;

EXT;PoE

Industrial Managed Switch

All rights reserved.

Every conceivable measure has been taken to ensure the accuracy and completeness of this documentation. However, as errors can never be fully excluded, we always appreciate any information or suggestions for improving the documentation.

E-Mail: documentation@wago.com

We wish to point out that the software and hardware terms as well as the trademarks of companies used and/or mentioned in the present manual are generally protected by trademark or patent.

WAGO is a registered trademark of WAGO Verwaltungsgesellschaft mbH.

Table of Contents

1 Notes about this Documentation....10

1.1 Validity of this Documentation....10
1.2 Copyright....10
1.3 Symbols 11
1.4 Number Notation .... 13
1.5 Font Conventions ...... 13

2 Important Notes ....14

2.1 Legal Bases....14
2.1.1 Subject to Changes....14
2.1.2 Personnel Qualification 14
2.1.3 Proper Use of the Industrial Switches 14
2.1.4 Technical Condition of Specified Devices....15
2.1.5 Standards and Regulations for Operating the Industrial Switches .... 15
2.2 Safety Advice (Precautions) 16
2.3 Special Use Conditions for ETHERNET Devices 19

3 General 20

3.1 Scope of Supply 20
3.2 Industrial ETHERNET-Technology 20
3.3 Switching Technology....21
3.4 PoE (Power over Ethernet)....21
3.5 Autonegotiation 22
3.6 Autocrossing....23
3.7 Store-and-forward switching mode 23
3.8 Transmission Methods....23

4 Device Description....24

4.1 View 25
4.1.1 Front View....25
4.1.2 Top View....27
4.2 Connectors....28
4.2.1 Power Supply (PWR/RPS)....28
4.2.2 Network Connections....29
4.2.2.1 RJ45 Connection....30
4.2.2.2 10/100/1000BASE-T-Ports 30
4.2.2.3 10/100/1000BASE-T-Ports with PoE+ 30
4.2.2.4 1000BASE-SX/-LX-Ports 30
4.3 Display Elements....31
4.3.1 Unit-LEDs 31
4.3.2 Port-LEDs 32
4.4 Operating elements ....33
4.4.1 DIP Switches 33
4.4.2 Reset Button 34
4.5 Label 35
4.5.1 Hardware and Software Version 35
4.6 Technical Data 36
4.6.1 Device Data 36

4.6.2 System Data 36

4.6.3 Power Supply....36

4.6.4 Communication....37

4.6.5 Environmental Conditions 37

4.7 Approvals 38

5 Mounting....39

5.1 Installation Site 39

5.2 Installation on a Carrier Rail 39

5.3 Removal from Carrier ail....39

6 Connect Devices....40

6.1 Power Supply 40

6.2 External Alarm Contact Port 41

6.3 Console Port Cable Connection....41

6.4 1000Base-SX/LX Port, Fiber Optic 42

6.5 10/100/1000BASE-T Ports ....43

7 Enhanced Features....44

7.1 Basic Settings....44

7.1.1 Jumbo Frame....44

7.1.2 SNTP 44

7.1.3 Management Host....45

7.1.4 MAC Management....45

7.1.4.1 Static MAC 46

7.1.4.2 MAC Blacklist (Blacklisting) 46

7.1.5 Port Mirroring 47

7.1.6 Port Settings 47

7.2 Advanced Settings....51

7.2.1 Bandwidth Control....51

7.2.1.1 QoS....51

7.2.1.2 Rate Limitation 58

7.2.1.2.1 Storm Control....58

7.2.1.2.2 Rate Limitation....58

7.2.2 IGMP Snooping....59

7.2.2.1 MVR....62

7.2.2.2 Multicast Address 65

7.2.3 VLAN 68

7.2.3.1 Port Isolation 69

7.2.3.2 GARP/GVRP 71

7.2.3.3 Q-in-Q 73

7.2.3.3.1 Port-Based Q-in-Q 76

7.2.3.3.2 Selective Q-in-Q....77

7.2.4 DHCP Relay 78

7.2.5 DHCP Relay Option 82....80

7.2.6 Dual Ring 82

7.2.7 ERPS 83

7.2.8 Dual Homing 86

7.2.9 Link Aggregation....87

7.2.9.1 Static Trunk....87

7.2.9.2 LACP....87

7.2.10 LLDP....88

7.2.11 Loop Detection....89

7.2.12 Jet Ring....90

7.2.13 STP....91

7.2.14 Xpress Ring 96

7.3 Security 97

7.3.1 IP Source Guard 97

7.4.5 Traffic Monitor....109

7.5 Management 110

7.5.1 SNMP 110

7.5.1.1 SNMP Trap 111

7.5.2 Auto Provision....111

7.5.3 Mail Alarm....113

8 Configuration 114

8.1 Overview of Configuration Options 114

8.1.1 Telnet Port 115

8.2 Console Port....116

9 Configuration in the WBM 117

9.1 System Status 121

9.1.1 System Information....121

9.2 Basic Settings....123

9.2.1 General Settings....123

9.2.1.1 System 123

9.2.1.2 Jumbo Frame 125

9.2.1.3 SNTP....126

9.2.1.4 Management Host....129

9.2.2 MAC Management....130

9.2.2.1 Static MAC Settings....130

9.2.2.2 MAC Table 132

9.2.2.3 Age Time Setting....133

9.2.2.4 Refusal MAC Settings 134

9.2.3 Port Mirroring 135

9.2.4 Port Settings....137

9.2.4.1 General Settings....137

9.2.4.2 Information 139

9.3 Advanced Settings....140

9.3.1 Bandwidth Settings 140

9.3.1.1 QoS....140

9.3.1.1.1 Port Priority....140

9.3.1.1.2 IP DiffServ (DSCP) 141

9.3.1.1.3 Priority/Queue Mapping 142

9.3.1.1.4 Schedule Mode....143

9.3.1.2 Rate Limitation 145

9.3.1.2.1 Broadcast Storm Control....145

9.3.1.2.2 Rate Limitation....147

9.3.2 IGMP Snooping....148

9.3.2.1 IGMP Snooping....148

9.3.2.1.1 General Settings 148

9.3.2.1.2 Port Settings 150

9.3.2.1.3 Querier Settings....152

9.3.2.2 IGMP Filter 153

9.3.2.2.1 General Settings....153

9.3.2.2.2 Multicast Groups....154

9.3.2.2.3 Port Settings 155

9.3.2.3 Multicast VLAN Registration 156

9.3.2.3.1 MVR Settings....156

9.3.2.3.2 Group Settings....158

9.3.2.4 Static Multicast Addresses 159

9.3.2.5 Multicast Statistics....160

9.3.3 VLAN 161

9.3.3.1 Port Isolation 161

9.3.3.2 VLAN....163

9.3.3.2.1 VLAN Settings 163

9.3.3.2.2 Tag Settings....165

9.3.3.2.3 Port Settings 166

9.3.3.3 GARP VLAN Registration Protocol....168

9.3.3.3.1 GVRP 168

9.3.3.3.2 GARP Timer 170

9.3.3.4 IP Subnet VLAN 172

9.3.3.5 MAC VLAN....173

9.3.3.6 Protocol VLAN....174

9.3.3.7 Q-in-Q 175

9.3.3.7.1 VLAN Stacking....175

9.3.3.7.2 Port-Based Q-in-Q 177

9.3.3.7.3 Selective Q-in-Q....178

9.3.4 DHCP Relay 180

9.3.5 DHCP Options 181

9.3.6 Dual Homing 183

9.3.7 Dual Ring....185

9.3.8 ERPS....187

9.3.8.1 Ring Settings....187

9.3.8.2 Instance Settings....191

9.3.9 Link Aggregation....192

9.3.9.1 Static Trunk....192

9.3.9.2 LACP....194

9.3.9.3 LACP Info....196

9.3.10 LLDP....198

9.3.10.1 Settings....198

9.3.10.2 Neighboring Detection 200

9.3.11 Loop Detection....201

9.3.12 Jet Ring....203

9.3.13 MODBUS....205

9.3.14 PoE....206

9.3.14.1 Configuration....206

9.3.14.2 Schedule 208

9.3.14.3 PD Alive Check 211

9.3.14.4 Power Delay (Switch-on Delay) 214

9.3.15 Spanning Tree Protocol 216

9.3.15.1 General Settings....216

9.3.15.2 Port Parameters 218

9.3.15.3 STP Status....221

9.3.16 Xpress Ring 222

9.4 Security 224

9.4.1 IP Source Guard 224

9.5.3 Port Statistics....250

9.5.4 Port Utilization....251

9.5.5 RMON Statistics....252

9.5.6 SFP Information....255

9.5.7 Traffic Monitor....258

9.6 Management 261

9.6.1 SNMP 261

9.6.1.1 SNMP 261

9.6.1.1.1 SNMP Settings 261

9.6.1.1.2 Community Name 262

9.6.1.2 SNMP Trap 264

9.6.1.2.1 Trap Receiver Settings....264

9.6.1.3 SNMPv3 Configuration 265

9.6.1.3.1SNMPv3 User265
9.6.1.3.2SNMPv3 Groups267
9.6.1.3.3SNMPv3 View268
9.6.2Auto Provision269
9.6.3Mail Alarm270
9.6.4Maintenance272
9.6.4.1Configuration272
9.6.4.2Firmware274
9.6.4.3Reboot275
9.6.4.4Protocols276
9.6.5System Log278
9.6.6User Account280
10Appendix282
10.1Console Port (RJ-45 to DB9)282
10.2RJ-45 Cable283
10.3Configuring in the Command Line Interface (CLI)284
10.3.1System Status284
10.3.1.1System Information284
10.3.2Basic Settings285
10.3.2.1System285
10.3.2.2Jumbo Frame285
10.3.2.3SNTP286
10.3.2.4Management Host287
10.3.2.5MAC Management288
10.3.2.6Blackhole MAC288
10.3.2.7Port Mirroring289
10.3.2.8Port Settings:290
10.3.3Advanced Settings291
10.3.3.1Bandwidth Control291
10.3.3.2QoS291
10.3.3.3Rate Limitation291
10.3.3.4Storm Control292
10.3.3.5IGMP Snooping293
10.3.3.6MVR294
10.3.3.7Multicast Address294
10.3.3.8VLAN295
10.3.3.8.1Port Isolation295
10.3.3.8.2VLAN Settings296
10.3.3.9GARP/GVRP297
10.3.3.10Q-in-Q298
10.3.3.10.1VLAN Stacking298
10.3.3.11DHCP Relay299
10.3.3.12Dual Homing300
10.3.3.13Link Aggregation300
10.3.3.14LACP301
10.3.3.15LLDP301
10.3.3.16Loop Detection302
10.3.3.17STP302
10.3.3.18Xpress Ring304

10.3.4 Security....305

10.3.4.1 DHCP Snooping....305

10.3.4.2 Server Screening....306

10.3.4.3 Binding Table 306

10.3.4.4 ARP Inspection....307

10.3.4.5 Filter Table 307

10.3.4.6 Access Control List....307

10.3.4.7 802.1X....309

10.3.4.8 Port Security....310

10.3.5 Monitor....311

10.3.5.1 Alarm....311

10.3.5.2 Monitor Information....311

10.3.5.3 RMON Statistics....311

10.3.5.4 SFP Information 311

10.3.5.5 Traffic Monitor 312

10.3.6 Management....313

10.3.6.1 SNMP....313

10.3.6.2 Auto Provision 314

10.3.6.3 Mail Alarm 314

10.3.6.4 Maintenance....315

10.3.6.5 System Log 315

10.3.6.6 User Account....316

10.4 MODBUS/TCP Tables 317

10.4.1 Data Format and Function Code 317

10.4.2 MODBUS Register....317

List of Figures 350

List of Tables 353

1 Notes about this Documentation

Wago 852-1505 - Notes about this Documentation - 1

Note

Always retain this documentation!

This documentation is part of the product. Therefore, retain the documentation during the entire service life of the product. Pass on the documentation to any subsequent user. In addition, ensure that any supplement to this documentation is included, if necessary.

1.1 Validity of this Documentation

This documentation is only applicable to WAGO ETHERNET accessory products "8-Port 1000BASE-T;4-Slot 1000BASE-SX/LX; EXT;PoE" (852-1505).

This Manual, including all figures and illustrations, is copyright-protected. Any further use of this Manual by third parties that violate pertinent copyright provisions is prohibited. Reproduction, translation, electronic and phototechnical filing/archiving (e.g., photocopying) as well as any amendments require the written consent of WAGO Kontakttechnik GmbH & Co. KG, Minden, Germany. Non-observance will involve the right to assert damage claims.

1.3 Symbols

Wago 852-1505 - Symbols - 1

DANGER

Personal Injury!

Indicates a high-risk, imminently hazardous situation which, if not avoided, will result in death or serious injury.

Wago 852-1505 - Personal Injury! - 1

Wago 852-1505 - Personal Injury! - 2

DANGER

Personal Injury Caused by Electric Current!

Indicates a high-risk, imminently hazardous situation which, if not avoided, will result in death or serious injury.

Wago 852-1505 - Personal Injury Caused by Electric Current! - 1

WARNING

Personal Injury!

Indicates a moderate-risk, potentially hazardous situation which, if not avoided, could result in death or serious injury.

Wago 852-1505 - Personal Injury! - 1

CAUTION

Personal Injury!

Indicates a low-risk, potentially hazardous situation which, if not avoided, may result in minor or moderate injury.

NOTICE

Damage to Property!

Indicates a potentially hazardous situation which, if not avoided, may result in damage to property.

Wago 852-1505 - Damage to Property! - 1

NOTICE

Damage to Property Caused by Electrostatic Discharge (ESD)!

Indicates a potentially hazardous situation which, if not avoided, may result in damage to property.

Wago 852-1505 - Damage to Property Caused by Electrostatic Discharge (ESD)! - 1

Note

Important Note!

Indicates a potential malfunction which, if not avoided, however, will not result in damage to property.

Wago 852-1505 - Important Note! - 1

Information

Additional Information:

Refers to additional information which is not an integral part of this documentation (e.g., the Internet).

1.4 Number Notation

Table 1: Number Notation

Number CodeExampleNote
Decimal100Normal notation
Hexadecimal0x64C notation
Binary'100' '0110.0100'In quotation marks, nibble separated with dots (.)

1.5 Font Conventions

Table 2: Font Conventions

Font TypeIndicates
italicNames of paths and data files are marked in italic-type.e.g.: C:\Program Files\WAGO Software
MenuMenu items are marked in bold letters.e.g.: Save
>A greater-than sign between two names means the selection of a menu item from a menu.e.g.: File > New
InputDesignation of input or optional fields are marked in bold letters,e.g.: Start of measurement range
“Value”Input or selective values are marked in inverted commas.e.g.: Enter the value “4 mA” under Start of measurement range.
[Button]Pushbuttons in dialog boxes are marked with bold letters in square brackets.e.g.: [Input]
[Key]Keys are marked with bold letters in square brackets.e.g.: [F5]

2 Important Notes

This section includes an overall summary of the most important safety requirements and notes that are mentioned in each individual section. To protect your health and prevent damage to devices as well, it is imperative to read and carefully follow the safety guidelines.

2.1.1 Subject to Changes

WAGO Kontakttechnik GmbH & Co. KG reserves the right to provide for any alterations or modifications. WAGO Kontakttechnik GmbH & Co. KG owns all rights arising from the granting of patents or from the legal protection of utility patents. Third-party products are always mentioned without any reference to patent rights. Thus, the existence of such rights cannot be excluded.

2.1.2 Personnel Qualification

All sequences implemented on Series 852 devices may only be carried out by electrical specialists with sufficient knowledge in automation. The specialists must be familiar with the current norms and guidelines for the devices and automated environments.

All changes to the controller should always be carried out by qualified personnel with sufficient sufficient skills in PLC programming.

2.1.3 Proper Use of the Industrial Switches

The device is designed for the IP30 protection class. It is protected against the insertion of solid items and solid impurities up to 2.5 mm in diameter, but not against water penetration. Unless otherwise specified, the device must not be operated in wet and dusty environments.

2.1.4 Technical Condition of Specified Devices

The devices to be supplied ex works are equipped with hardware and software configurations, which meet the individual application requirements. These modules contain no parts that can be serviced or repaired by the user. The following actions will result in the exclusion of liability on the part of WAGO Kontakttechnik GmbH & Co. KG:

  • Repairs,
  • Changes to the hardware or software that are not described in the operating instructions,
  • Improper use of the components.

Further details are given in the contractual agreements. Please send your request for modified and new hardware or software configurations directly to WAGO Kontakttechnik GmbH & Co. KG.

2.1.5 Standards and Regulations for Operating the Industrial Switches

Please observe the standards and regulations that are relevant to installation:

  • The data and power lines must be connected and installed in compliance with the standards to avoid failures on your installation and eliminate any danger to personnel.
  • For installation, startup, maintenance and repair, please observe the accident prevention regulations of your machine (e.g., DGUV Regulation "Electrical Installations and Equipment").
  • Emergency stop functions and equipment must not be deactivated or otherwise made ineffective. See relevant standards (e.g., DIN EN 418).
  • Your installation must be equipped in accordance to the EMC guidelines so electromagnetic interferences can be eliminated.
  • Please observe the safety measures against electrostatic discharge according to DIN EN 61340-5-1/-3. When handling the modules, ensure that environmental factors (persons, workplace and packing) are well grounded.
  • The relevant valid and applicable standards and guidelines regarding the installation of switch cabinets must be observed.

2.2 Safety Advice (Precautions)

For installing and operating purposes of the relevant device to your system the following safety precautions shall be observed:

Wago 852-1505 - Safety Advice (Precautions) - 1

Wago 852-1505 - Safety Advice (Precautions) - 2

DANGER

Do not work on devices while energized!

All power sources to the device shall be switched off prior to performing any installation, repair or maintenance work.

Wago 852-1505 - DANGER - 1

DANGER

Only install in appropriate housings, cabinets or electrical operation rooms!

WAGO's 852 Series ETHERNET Switches are considered exposed operating components. Therefore, only install these switches in lockable housings, cabinets or electrical operation rooms. Access must be limited to authorized, qualified staff having the appropriate key or tool.

Wago 852-1505 - DANGER - 1

DANGER

Ensure a standard connection!

To minimize any hazardous situations resulting in personal injury or to avoid failures in your system, the data and power supply lines shall be installed according to standards, with careful attention given to ensuring the correct terminal assignment. Always adhere to the EMC directives applicable to your application.

NOTICE

Do not use in telecommunication circuits!

Only use devices equipped with ETHERNET or RJ-45 connectors in LANs.

Never connect these devices with telecommunication networks.

NOTICE

Replace defective or damaged devices!

Replace defective or damaged device/module (e.g., in the event of deformed contacts).

NOTICE

Protect the components against materials having seeping and insulating properties!

The components are not resistant to materials having seeping and insulating properties such as: aerosols, silicones and triglycerides (found in some hand creams). If you cannot exclude that such materials will appear in the component environment, then install the components in an enclosure being resistant to the above-mentioned materials. Clean tools and materials are imperative for handling devices/modules.

NOTICE

Clean only with permitted materials!

Clean housing and soiled contacts with propanol.

NOTICE

Do not use any contact spray!

Do not use any contact spray. The spray may impair contact area functionality in connection with contamination.

NOTICE

Do not reverse the polarity of connection lines!

Avoid reverse polarity of data and power supply lines, as this may damage the devices involved.

NOTICE

Wago 852-1505 - NOTICE - 1

Avoid electrostatic discharge!

The devices are equipped with electronic components that may be destroyed by electrostatic discharge when touched. Please observe the safety precautions against electrostatic discharge per DIN EN 61340-5-1/-3. When handling the devices, please ensure that environmental factors (personnel, work space and packaging) are properly grounded.

CAUTION

Laser radiation warning!

Do not stare into openings of the connections when no cable is connected, so as not to expose the radiation.

It can emit invisible radiation.

It concerns here a laser class 1 according EN 60825-1.

Note

Wago 852-1505 - Note - 1

Radio interference in residential areas

This is a Class A device. This device can cause radio interference in residential areas; in this case, the operator can be required to take appropriate measures to prevent such interference.

2.3 Special Use Conditions for ETHERNET Devices

If not otherwise specified, ETHERNET devices are intended for use on local networks. Please note the following when using ETHERNET devices in your system:

  • Do not connect control components and control networks to an open network such as the Internet or an office network. WAGO recommends putting control components and control networks behind a firewall.
  • Limit physical and electronic access to all automation components to authorized personnel only.
  • Change the default passwords before first use! This will reduce the risk of unauthorized access to your system.
  • Regularly change the passwords used! This will reduce the risk of unauthorized access to your system.
  • If remote access to control components and control networks is required, use a Virtual Private Network (VPN).
  • Regularly perform threat analyses. You can check whether the measures taken meet your security requirements.
  • Use “defense-in-depth” mechanisms in your system's security configuration to restrict the access to and control of individual products and networks.

3 General

3.1 Scope of Supply

• 1 Industrial managed switch with multipoint connector
- Protective covers for unused ports
• Data cable RS-232 for CLI

3.2 Industrial ETHERNET-Technology

WAGO's rugged switches are designed for industrial use in compliance with the following standards:

following standards:

  • IEEE 802.3
  • IEEE 802.3u
  • IEEE 802.3ab
  • IEEE 802.3z
  • IEEE 802.3ad
  • IEEE 802.3x
  • IEEE 802.1D
  • IEEE 802.1w
  • IEEE 802.1s
  • IEEE 802.1Q
  • IEEE 802.1p
  • IEEE 802.1X
  • IEEE 802.1AB
  • IEEE 802.3ad
  • IEEE 1588v2
  • IEEE 802.3af
  • IEEE 802.3at
  • ITU-T G8032v1/v2

The switches have a power supply with a supply voltage range of 48 ... 57 V. "Power over Ethernet" (PoE+) is supported on eight ports. Features such as autonegotiation and auto MDI/MDIX (crossover) on all 10/100 BASE-T ports are also implemented.

3.3 Switching Technology

Industrial ETHERNET primarily uses switching technology. This technology allows any network subscriber to send at any time because the subscriber always has an open peer-to-peer connection to the next switch. The connection is bidirectional, i.e., the subscriber can send and receive at the same time (full duplex).

The targeted use of switching technology can increase real-time capability because the peer-to-peer connection prevents collisions in network communication.

3.4 PoE (Power over Ethernet)

"Power over Ethernet" (PoE) supplies power and transmits data simultaneously and safely over the same ETHERNET cable. This makes it possible to do without a separate power supply cable. "Power over Ethernet" (POE) is an ETHERNET network technology defined in the IEEE 802.3af (PoE) und 802.3at (PoE+) standards. If the IEEE 802.3at standard is supported, a higher current can be transmitted via the ETHERNET cable.

Table 3: Comparison of PoE and PoE+

FeaturePoEPoE+
StandardIEEE 802.3afIEEE 802.3at
PSE power15.4 W25.4 W
Max. power PD12.95 W21.90 W
Max. current per core pair350 mA600 mA
Transmission standard10BASE-T100BASE-TX10BASE-T100BASE-TX1000BASE-T

Calculation Example for PoE+:

Table 4: Calculation Example for PoE+

Power ConsumptionValue
8 ports á 30 W240 W
Device requirement18 W
Total258 W

Special supply devices (PSE = "Power Sourcing Equipment") and subscribers (PD = "Powered Device") are required for PoE.

The PoE description and performance classes are available in the appendix (see section "Appendix" > "PoE Performance Classes").

PoE can be realized in two operating modes.

Operating Mode A

In this operating mode, the supply voltage is modulated on the data lines ("phantom power").

Operating Mode A can be used with the following transmission standards:

  • 10BASE-T
  • 100BASE-TX
  • 1000BASE-T

In this operating mode, core pairs 1 and 2 (+), as well as 3 and 6 (−) are used for the power supply. A 4-core or 8-core ETHERNET cable of at least category 5 or 5e can be used (see Section “Appendix” > “RJ-45 Cable”).

Operating Mode B

In this operating mode, the core pairs of the network cable not used for data transmission are used for the power supply (“spare pair power”).

Operating Mode B can be used with the following transmission standards:

  • 10BASE-T
  • 100BASE-TX

In this operating mode, the open core pairs 4 and 5 (+) or 7 and 8 (−) are used for the power supply. An 8-core ETHERNET cable of at least category 5 or 5e is required (see Section "Appendix" > "RJ-45 Cable").

3.5 Autonegotiation

Autonegotiation allows the switch to detect the transmission rate and operating mode for each port and the connected subscriber or subscribers, and to set them automatically. The highest possible mode (transmission speed and operating mode) is set.

Autonegotiation is available to ETHERNET subscribers connected to the switch via copper cable.

This make the switch a plug-and-play device.

3.6 Autocrossing

Autocrossing (MDI/MDI-X, "Medium Dependent Interface") automatically reconfigures the receive and transmit signals for twisted-pair interfaces as needed. This allows users to use wired and crossover cables in the same manner 1:1.

3.7 Store-and-forward switching mode

In “Store and Forward” mode, the ETHERNET switch caches the entire data telegram, checks it for errors (CRC checksum) and if there are no errors, puts it in a queue. Subsequently, the data telegram (MAC table) is selectively forwarded to the port that has access to the addressed node.

The time delay required by the data telegram to pass the store-and-forward switch depends on the telegram length.

Advantage of "Store and Forward":

The data telegrams are checked for correctness and validity. This prevents faulty or damaged data telegrams from being distributed via the network.

3.8 Transmission Methods

2 modes are available for data transmission in ETHERNET networks:

- Half duplex

  • An ETHERNET device can only send or receive data at one time.
  • Collision detection (CSMA/CD) is enabled.
  • The length of the network is limited by the propagation delays of the devices and transmission media.

- Full duplex

  • An ETHERNET device can send and receive data at the same time.
  • Collision detection (CSMA/CD) is disabled.
  • The length of the network only depends on the performance limits of the send and receive components used.

4 Device Description

The 852-1505 is a configurable industrial ETHERNET switch with 8 10/100/1000BASE-T ports, all of which support Power over Ethernet (PoE+) at 30 W. These 8 PoE+ ports can be used simultaneously for power supply and data transfer. In addition to the reduced wiring effort, it is possible to do without a separate power supply for sensors. The industrial managed switch is easy to configure and install, so it can be used in numerous applications. Its four SFP slots make it possible to integrate the industrial managed switch into extensive networks.

4.1 View

4.1.1 Front View

PWR RPS ALM POST 1 2 3 4 SFP 9 10 11 12 PoE 1 3 5 7 2 4 6 8 10 Reset 5 1000M 1 2 10/100M 3 4 5 6 7 8 9 10 6 7 8 WACD 852-1505

Figure 1: Front View of the Industrial Managed Switch

Table 5: Legend for the Figure "Front View of the Industrial Managed Switch"

Pos.DescriptionMeaningFor Details, see Section
1PWR Status LED, supply voltage“Device Description” > “Display Elements”
2RPS Status LED, redundant, supply voltage“Device Description” > “Display Elements”
3ALM Status LED, alarm“Device Description” > “Display Elements”
4POST Status LED, POST“Device Description” > “Display Elements”

Table 5: Legend for the Figure "Front View of the Industrial Managed Switch"

Pos.DescriptionMeaningFor Details, see Section
5Reset Reset button“Device Description” > “Operating Elements”
6 -Status LED TX port 1000 Mbit/s(1 LED for each port)“Device Description” > “Display Elements”
7 -Status LED TX port 10/100 Mbit/s(1 LED for each port)“Device Description” > “Display Elements”
8-Port 4 x SFP (1000BASE-SX/LX, fiber optic)“Device Description” > “Connections”
9-Port 8 x RJ-45 (10/100/1000BASE-T ports)“Device Description” > “Connections”
10-Port 1 x RJ-45 (RS-232 port switch)“Device Description” > “Connections”
11PoE Status LED SFP port LNK/ACT (4)“Device Description” > “Display Elements”
12SFPStatus LED TX port 1000 Mbit/s(1 LED for each port)“Device Description” > “Display Elements”

4.1.2 Top View

48~57VDC PWR RPS ALM OFF ON 1 2 3 4 5 6 7 8 9 10 11 12 13 14 ALM 1 PWR 2 RPS 3 P1 4 P2 5 P3 6 P4 7 P5 8 P6 9 P7 10 P8 11 P9 12 P10 13 P11 14 P12

Figure 2: Top View of the industrial ECO switch

Table 6: Legend for the Figure "Front View of the Industrial Managed Switch"

No.DescriptionMeaning For Details see Section
1-Grounding lug-
2 -Connector (male) for power consumption (PWR/RPS/ALM) and potential-free alarm contact"Device Description" > "Connections"
3 -DIP Switches"Device Description" > "Operating Elements"

4.2 Connectors

4.2.1 Power Supply (PWR/RPS)

The female connector (Item No. 2231-106/026-000) can easily be connected to the 6-pole male connector located on the top of the switch.

The male connector shows the following pin assignment:

48~57VDC + PWR - [ ] + RPS - [ ] - ALM

Figure 3: Power Supply (PWR/RPS)

Table 7: Legend for Figure "Power Supply (PWR/RPS)"

ConnectionDescriptionDescription
+PWRPrimary DC input
-PWRPrimary DC input
+RPSSecondary DC input
-RPSSecondary DC input
ALMContact for external alarm
ALMContact for external alarm

Wago 852-1505 - Power Supply (PWR/RPS) - 2

NOTICE

Warning: Damage to property caused by electrostatic discharge (ESD)!

DC Powered Switch: Power is supplied through an external DC power source. Since the switch does not include a power switch, plugging its power adapter into a power outlet will immediately power it on.

4.2.2 Network Connections

The industrial managed switch uses ports with fiber optic or copper connectors and supports ETHERNET, Fast ETHERNET and Gigabit Ethernet.

1 CONCKLE Reset 1000M 1 10^100M 2 3 4 5 6 7 8 9 10 11 12 2 3

Figure 4: Network Connections

Table 8: Legend for Figure "Network Connections"

No.DesignationExplanationFor Details, see Section:
1 -1 RJ 45 connection (RS 232 port)“Device Description” > ...“RJ-45 Connection”
2 -8 RJ 45 connections (10/100/1000BASE T) with PoE+“Device Description” > ...“10/100/1000BASE-T Ports with PoE+”
3 -4 x SFP connections (1000BASE-SX/-LX, glass fibre)„Device Description“ > ...„1000BASE-SX/-LX-Anschlüsse“

4.2.2.1 RJ45 Connection

The connection to ETHERNET-based fieldbuses is made via the RJ-45 connector. The pin assignment for ETHERNET RJ-45 plugs is specified in the EIA/TIA 568 standard. The conductor colors also correspond to this standard. The pin assignment and conductor color differ depending on the number of assigned conductors (4- or 8-core).

4.2.2.2 10/100/1000BASE-T-Ports

The 10/100/1000BASE-T ports support networks speeds of 10 Mbps, 100 Mbps and 1000 Mbps and can be operated in half- and full-duplex transmission modes. These ports also provide automatic crossover detection (Auto-MDI/MDI-X), with plug-and-play capabilities. Simply plug the network cables into the ports; they then adapt to the end node devices. We recommend the following cable for the RJ-45 ports:

- Cat. 5e or better with a max. cable length 100 m

4.2.2.3 10/100/1000BASE-T-Ports with PoE+

10/100/1000BASE-T ports support Power over Ethernet + (PoE+) up to 30 W per port.

Advantages:

• No separate power supply required for PoE+-capable terminal devices
- No separate data and power lines required

4.2.2.4 1000BASE-SX/-LX-Ports

1000BASE SX/LX ports are designed to connect Gigabit SFP modules that support network speeds of 1000 Mbit/s.

4.3 Display Elements

The industrial managed switch is equipped with device LEDs and port LEDs. You can see the status quickly with the device LEDs, while the port LEDs provide information about connection actions.

4.3.1 Unit-LEDs

PWR RPS ALM POST SFP 9 10 11 12 PoE 1 3 5 7 2 4 6 8

Figure 5: Device-LEDs

Table 9: Legend for "Device LEDs" Figure

LEDNameStatusDescription
PWRPrimary-Power-LEDGreenThe industrial managed switch uses the primary power supply.
OffThe primary power supply has been switched off, or a fault has occurred.
RPSRedundant-Power-System-LEDGreenThe industrial managed switch uses the redundant power supply.
OffThe redundant power supply has been switched off, or a fault has occurred.
ALMAlarm-LEDRedFailure of a port connection; miscellaneous alarm.
OffNo alarm to report.
POSTPower-On-Self-Test-LEDFlashesThe POST function is executed.
GreenThe POST is completed.
OffNo power supply, or error detected in the POST function.
SFP9 ... 12SFP-Port-LEDGreenLights up when the port is linked.
FlashesData traffic being routed via the port.
OffNo proper link established at the port.
PoE1 ... 8PoE-Port-LEDGreenPoE power is present.
OffNo PoE power is present.

4.3.2 Port-LEDs

1000M 1 1Q/100M 3 5 7 2 4 6 8

Figure 6: Port-LEDs

Table 10: Legend for "Port LEDs" Figure

LEDNameStatusDescription
1000M1000BASE T-Ports-LED(1 LED für jeden Anschluss)Green Port in operation at 1000 Mbps.
FlashesData traffic being routed via the port.
OffNo proper link established at the port.
10/100 M10/100BASE T-Ports-LED(1 LED für jeden Anschluss)GreenPort in operation at 10/100 Mbps.
FlashesData traffic being routed via the port.
OffNo proper link established at the port.

4.4 Operating elements

4.4.1 DIP Switches

On the top side of the industrial switch there are DIP switches to configure the alarm and arbiter configurations.

The meaning of the DIP switch settings are described below:

OFF ON 1 2 3 4 5 6 7 8 9 10 11 12 13 14 ALM 1 PWR 2 RPS 3 P1 4 P2 5 P3 6 P4 7 P5 8 P6 9 P7 10 P8 11 P9 12 P10 13 P11 14 P12

Figure 7: DIP Switches

Table 11: Legend for Figure "DIP Switches

No.NameStatusDescription
1PWRONThe alarm reporting function for the primary power supply is activated.
OFFThe alarm reporting function for the primary power supply is deactivated.
2RPSONThe alarm reporting function for the secondary power supply is activated.
OFFThe alarm reporting function for the secondary power supply is deactivated.
3 ... 14P1 ... P12ONThe alarm reporting function for the port x connection is activated.
OFFThe alarm reporting function for the port x connection is deactivated.

DIP switches let the user manually turn ON/OFF any port, the external alarm, or the redundant power supply.

The DIP switch must be "ON" to activate the port alarm function. The default setting is "OFF".

The following is the recommended procedure for configuring and setting DIP switches during initial installation:

1 Turn all DIP switches to "OFF".
2 Install the industrial managed switch in your network.
3 Select the port(s) to be monitored or the alarm to be activated.
4 Set the DIP switch of the corresponding port to "ON".
5 Turn the industrial managed switch ON.

4.4.2 Reset Button

Wago 852-1505 - Reset Button - 1
Figure 8: Reset Button

Table 12: Legend for Figure "Reset Button"

NameStatusDescription
ResetPress the Reset button for 2 seconds and release.The system is restarted.

Wago 852-1505 - Reset Button - 2

Note

Important Note!

Use a suitable object, e.g., ballpoint pen or straightened paper clip, to press the Reset button.

4.5 Label

4.5.1 Hardware and Software Version

There is a label with the "MAC Address" and "Serial NO" on the back of the industrial managed switch.

This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:

(1) This device may not cause harmful interference.
(2) This device must accept any interference received, including interference that may cause undesired operations

Wago 852-1505 - Hardware and Software Version - 1

S/N: 0001790016430201

Made in Taiwan

Ambient Temp. -40℃\~+70℃

Figure 9: Label (Example)
Table 13: Legend for Figure "Label"

No.“Serial NO” Description
02Firmware version
01Hardware version

4.6 Technical Data

4.6.1 Device Data

Table 14: Technical Data – Device Data

WidthCarrier rail mounting50 mm
HeightCarrier rail mounting120 mm (from the top edge of the carrier rail)
DepthCarrier rail mounting162 mm
Weight970 g
Degree of protectionIP30

4.6.2 System Data

Table 15: Technical Data – System Data

MAC tableUp to 16000 addresses
VLANPort based and tag based (4094 VIDs)
Jumbo Frame Size10 kB
Wavelength optical fibersDepends on SFP module
Maximum lengths10/100/1000BASE-TX: 100 m;Fiber optic: 2 km to 80 kmRS-232: 15 m

4.6.3 Power Supply

Table 16: Technical Data – Power Supply

Supply voltageDC 48 ... 57 V
Power consumption, max.18 W, 258 W mit 8 PoE+

4.6.4 Communication

Table 17: Technical Data – Communication

Ports8 x 10/100/1000BASE-T with PoE+;1 x RS-232 (RJ-45)
StandardsIEEE 802.3 10BASE-TIEEE 802.3u 100 BASE-TXIEEE 802.3ab 1000BASE-TIEEE 802.3z 1000BASE-SX/-LXIEEE 802.3ad Port Trunk with LACPIEEE 802.3x Flow ControlIEEE 802.1D Spanning Tree Protocol (STP)IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)IEEE 802.1Q VLAN TaggingIEEE 802.1p PrioritizationIEEE 802.1X Port AuthenticationIEEE 802.1AB Link Layer Discovery Protocol (LLDP)IEEE 802.3ad Port Trunk with LACPIEEE 1588v2 Precision Time Protocol (PTP)IEEE 802.3af Power over Ethernet (PoE)IEEE 802.3at High Power over Ethernet (PoE+)ITU-T G8032v1/v2 Ethernet Ring Protection Switching (ERPS)
TopologyRing

4.6.5 Environmental Conditions

Table 18: Technical Data – Environmental Conditions

Surrounding air temperature, operation-40 °C ... +70 °C
Surrounding air temperature, storage-40 °C ... +80 °C
Relative humidity (without condensation)95 %
Vibration resistanceAcc. IEC 60068-2-6
Shock resistanceAcc. IEC 60068-2-27
EMC-1 immunity to interferenceAcc. EN 61000-6-2
EMC-1 Emission of interferenceAcc. EN 61000-6-4

4.7 Approvals

The following approvals have been granted for the WAGO ETHERNET accessory product “8-Port 1000BASE-T;4-Slot 1000BASE-SX/LX; EXT;PoE” (852-1505):

Wago 852-1505 - Approvals - 1

Conformity Marking

The following approvals are pending for WAGO ETHERNET accessory products "8-Port 1000BASE-T;4-Slot 1000BASE-SX/LX; EXT;PoE" (852-1505):

Wago 852-1505 - Approvals - 2

Ordinary

Locations

UL61010-2-201

5 Mounting

5.1 Installation Site

The location selected to install the industrial managed switch may greatly affect its performance. When selecting a site, we recommend considering the following rules:

• Install the industrial managed switch at an appropriate place. See section "Device Description" > ... > "Technical Data" for the acceptable temperature and humidity operating ranges.

Make sure that the heat output from the industrial managed switch and ventilation around it is adequate. Do not place any heavy objects on the industrial managed switch.

5.2 Installation on a Carrier Rail

The carrier rail must optimally support the EMC measures integrated into the system and the shielding of the internal data bus connections.

Place the industrial managed switch onto the DIN rail from the top and snap it into position.

5.3 Removal from Carrier ail

To remove the industrial managed switch from the carrier rail, insert a suitable tool into the metal tab under the switch and deflect the metal tab downward.

You can then release the switch down from the carrier rail and remove it upwards.

6 Connect Devices

6.1 Power Supply

The industrial managed switch uses direct current power supply for 48 ... 57 V.

The primary and secondary network link is established via a 6-pin plug-in connection located on the top of the industrial managed switch.

The female connector is composed of six connecting terminals and can be inserted and removed easily by hand to connect to the 6-pin plug connector located on the top of the switch.

The power supply for the industrial managed switch automatically adjusts to the local power source and can also be switched On if no or not all patch cables are connected.

1 Check whether the power LED on the front lights up when the device is switched ON. If not, check that the power cable is correctly and securely plugged in.
2 If a secondary power supply is connected, the RPS LED lights up.
3 PWR +/- conductors:
To connect or disconnect the conductors, actuate the spring in the female connector directly using a screwdriver or an operating tool and insert or remove the conductor.
4 For the backup DC connection, follow the same procedure as above.
Attach power wires to the female connector (in the position marked "RPS +/-").
5 Plug the female connector into the male connector of the switch if it has not already been plugged in.
6 Check whether the power LED on the top of the device lights up when power is supplied to the device. If not, check to ensure that the power cable is plugged in correctly and fits securely.

6.2 External Alarm Contact Port

The industrial managed switch has an alarm contact connection on the top panel. For detailed instructions on how to connect the alarm contact power wires to the two ALM contacts of the 6-pin female connector, please refer to section "Power Supply (PWR/RPS)" (it is the same procedure).

You can connect the alarm circuit to any warning device already installed in the user's control room or factory floor. When a fault occurs, the industrial switch sends a signal through the alarm contact to activate the external alarm. The alarm contact has two ports that form a fault circuit for connecting to alarm systems.

An alarm is signaled in the following cases:

1 Port link failure (e.g., cable disconnected, device breakdown, etc.)
2 PWR/RPS:

a Power failure (power cord is disconnected, power supply malfunction, etc.)

b Input power falls outside specification (48 ... 57 V)

3 Error in the Jet-Ring or ERPS-Ring

6.3 Console Port Cable Connection

The console port (RJ-45) provides the local management facility.

  1. Insert the RJ-45 side of the (8 pin RJ-45 to DB9) cable into the RJ-45 console port on the Industrial Managed Switch and the other end into the COM port of the computer.
  2. Configure the Hyper Terminal settings as mentioned in chapter "Configuration" > ... > "Console Port".

For console port (8 pin RJ-45) pin assignment, please see in the chapter "Appendix" > ...> "Console Port (RJ-45 to DB9)".

6.4 1000Base-SX/LX Port, Fiber Optic

When connecting a fiber optic cable to a 1000Base-SX/LX port on the industrial managed switch, make sure to use the right connector type (LC) and SFP module.

There are various types of multi-mode, single mode or WDM SFP modules. Follow the steps below to connect the fiber optic cable properly:

Wago 852-1505 - 1000Base-SX/LX Port, Fiber Optic - 1

Note

Rubber covers

Remove and safely store the rubber covers of the fiber optic port (LC).

If no fiber optic cable is connected, the rubber cover should be installed to protect the fiber optics.

1 Insert the respective SFP modules.
2 Ensure that the fiber optic ports are clean. You can clean the cable connectors by wiping them with a clean cloth or a cotton ball soaked with a little ethanol. Dirty fiber optic cables affect the quality of the light transmitted via the cable and leads to reduced performance at the port.
3 Connect one end of the fiber optic cable to the LC port of the industrial managed switch and the other end to the fiber optic port of the other device.

Wago 852-1505 - Rubber covers - 1

Note

Proper connection of the fiber optic cable to the SFP module

For a proper connection, snap the connector of the fiber optic cable into the SFP module audibly.

4 Check the respective port LED on the industrial managed switch that the connection is established (see section "Device Description" > ... > "Display Elements").

6.5 10/100/1000BASE-T Ports

The 10/100/1000BASE-T ports (RJ-45 ETHERNET ports) of the industrial managed switch support both autosensing and autonegotiation.

1 Connect one end of the twisted pair cable of the type Category 3/4/5/5e to an available RJ-45 port on the industrial managed switch and the other end to the port of the selected network node.
2 Check the respective port LED on the industrial managed switch that the connection is established.
(see section "Display Elements" > ... > "Port LEDs").

7 Enhanced Features

7.1 Basic Settings

7.1.1 Jumbo Frame

“Jumbo Frames” are ETHERNET frames with a size of more than 1518 bytes. Jumbo frames can increase data transmission efficiency in a network. The bigger the “Jumbo Frame,” the better the network performance is.

Wago 852-1505 - Jumbo Frame - 1

Note

"Jumbo Frame" settings

The size setting for the “Jumbo Frames” applies to each port of the switch.

All connected network subscribers must support the same “Jumbo Frame” size. Data packets that are larger than the “Jumbo Frame” setting are rejected by the corresponding network subscribers.

7.1.2 SNTP

SNTP ("Simple Network Time Protocol") is a protocol for synchronizing clocks in computer systems. It is a less complex implementation of an NTP ("Network Time Protocol").

SNTP uses UTC – “Coordinated Universal Time” (French: “Temps Universel Coordonné”). No information on time zones or daylight savings time is transmitted. This information falls outside the protocol range and must be obtained separately.

The SNTP port is 123.

Wago 852-1505 - SNTP - 1

Note

Note!

  1. The SNTP server always replies the current UTC time.
  2. If the switch receives the SNTP reply time, it adjusts the time to the time zone configuration and configures the time for the switch accordingly.
  3. If the time server's IP address is not configured, the switch does not send an SNTP request packet.
  4. If the switch does not receive an SNTP reply packet, it repeats the challenge indefinitely every ten seconds.
  5. If the switch receives an SNTP reply, it repeats the time request from the NTP server every hour.
  6. If the time zone and NTP server changes, the switch repeats the request process.
  7. No default SNTP server.

7.1.3 Management Host

The management host limits the number of hosts that the switch can manage. There is no “Management Host” in the default settings. Any host can manage the switch via Telnet or Web browser. If a user has configured one or more hosts, only those hosts can manage the switch. The function allows users to configure up to three entries for the management IPs.

7.1.4 MAC Management

The MAC address ("Media Access Control address") is the unique hardware number in a network.

Dynamische Adresse

When receiving frames, the switch records the source MAC address, receiving port, VLAN and an "Age Time" in the address table. When the "Age Time" is expired, the address entry is deleted from the address table.

Static Address

A static address set by the user does not include the "Age Time" and is not deleted by the switch. The static address can only be deleted by a user. The switch supports an address table of size up to 16 K.

Static and dynamic addresses share the same address table.

MAC Table

The “MAC Table” (MAC address table, also known as a filter database) shows which frames are forwarded to the switch’s ports or filtered out. If a device that belongs to a VLAN group sends a data packet that is forwarded to a port on the switch, the MAC address of the device is read from the switch’s MAC address table. It also shows whether the MAC address is dynamic (assigned by the switch) or static (set manually).

MAC Address Table

The switch uses the MAC address table to determine how to forward frames (see figure below).

  1. The switch checks a received frame and detects the port from which the source MAC address originates.
  2. The switch checks whether the frame's destination MAC address matches a source MAC address already detected in the MAC address table.
  3. If the switch already knows the port for this MAC address, it forwards the frame to that port.

  4. If the switch does not already know the port for this MAC address, it forwards the frame to all ports. "Port Flooding" (forwarding too often to all ports) can lead to network congestion.

  5. If the switch already knows the port for this MAC address and the destination port is the same as the input port, the frame is filtered.

Wago 852-1505 - MAC Address Table - 1

flowchart
graph TD
    A["Is destination MAC address in the MAC Table?"] -->|No| B["Foward to all ports."]
    A -->|Yes| C{Is the outgoing port different from the incoming port?}
    C -->|No| D["Filter this frame."]
    C -->|Yes| E["Foward to outgoing port."]

Figure 10: MAC Address Table Flowchart

7.1.4.1 Static MAC

Static MAC Addresses

A static MAC address is an address that has been manually entered in the MAC address table. Static MAC addresses have no "Age Time." When you set up rules for static MAC addresses, you set static MAC addresses for a port. This may reduce data transmission needs.

7.1.4.2 MAC Blacklist (Blacklisting)

This type of MAC address entry is configured manually. The switch ignores packets that have MAC addresses contained in "Blackhole" MAC address entries as their source or destination. "Blackhole" entries are configured to filter out frames with specific source or destination MAC addresses.

7.1.5 Port Mirroring

Port mirroring is used on switches to send a copy of network packets sent/received on one switch port or a range of switch ports to a network monitoring connection on another switch port (Monitor Port).

Port mirroring is used in network systems that require monitoring of network traffic, such as an IDS ("Intrusion Detection System").

Port mirroring, together with an NTA (“Network Traffic Analyzer”), can help to monitor network traffic. Users can monitor the selected ports (“Source Ports”) for egress and/or ingress packets.

Source Mode

  • "Ingress": The incoming data packets are copied and forwarded to the monitor port.
  • "Egress": The outgoing data packets are copied and forwarded to the monitor port.
  • Both: Both the incoming and the outgoing data packets are copied and forwarded to the to the monitor port.

Wago 852-1505 - Source Mode - 1

Note

  1. The monitor port cannot be a trunk member port.
  2. The monitor port cannot be an ingress or egress port.
  3. If a port has been configured as a source port and the user configures the port as a destination port, the port will be removed from the source ports automatically.

7.1.6 Port Settings

Duplex Mode

A duplex communication system is a system composed of two connected devices that can communicate with each other in both directions.

Half-Duplex

A half-duplex system provides for communication in both directions, but only one direction at a time (not simultaneously).

One device receives a signal and must wait for the other device to stop transmitting before replying.

OR

Figure 11: Half-Duplex Mode

Full-Duplex

A full-duplex system (also known as a double-duplex system) can communicate simultaneously in both directions.

Fixed-line telephone networks, for example, are full-duplex, since both callers can talk and listen at the same time.

Wago 852-1505 - Full-Duplex - 1

flowchart
graph LR
    A["Walkie 1"] <--> B["Walkie 2"]
    style A fill:#f9f,stroke:#333
    style B fill:#bbf,stroke:#333

Figure 12: Full-Duplex Mode

Loopback Test

In a “Loopback” test, a signal is sent from and then returned to a communication device (“looped back”).

The test checks the proper functioning of the device and looks for faulty nodes in the network.

For one type of “Loopback” test, a special plug (a so-called “wrap plug”) is plugged into a communications device. The plug causes transmitted (output) data to be returned as received (input) data, simulating a closed communication circuit using a single computer.

Auto MDI/MDIX

MDI ("Medium-Dependent Interface") is part of the transmitter/receiver unit (transceiver) of a network device.

Auto-MDIX ("Automatic Medium-Dependent Interface Crossover") is a network technology integrated in the port that automatically detects the required network cable type ("Straight-through" or "Crossover" cable) and configures the connection accordingly.

“Crossover” cables are then unnecessary for connecting devices.

The interface corrects incorrect cabling automatically.

For Auto-MDIX to work properly, the speed must be set to "Auto" for the interface and in the duplex settings.

Auto-Negotiation

Auto-negotiation is a method in which two interconnected ETHERNET network ports (e.g., the network port of a PC and a port of a router, hub or switch that is connected to it) independently negotiate and configure the maximum transmission speed and the duplex process.

Auto-negotiation only applies to twisted-pair cables – not to WLAN, fiber optic or coaxial cable connections.

If the port does not support auto-negotiation or turns off this feature, the switch determines the connection speed by detecting the signal on the cable and using half duplex mode.

If auto-negotiation is enabled on the switch, a port uses its pre-configured settings for speed and duplex mode when establishing the connection.

This should ensure that the same settings have been made on the port, allowing the connection to be established.

Flow Control

"Flow Control" regulates the transmission of signals by adjusting them to the bandwidth on the input port.

Higher data traffic on the port decreases the bandwidth and can overflow the buffer memory, which can lead to packet and frame loss.

According to IEEE 802.3x, the switch uses "Flow Control" in full-duplex mode and "Backpressure Flow Control" in half-duplex mode.

With flow control, the switch is used in full-duplex mode to send a pause signal to the sending port, causing it to temporarily stop sending signals when the receiving port memory buffers fill.

For “Backpressure Flow Control,” the switch sends a collision signal to the sending port in half-duplex mode (mimicking a state of packet collision), causing the sending port to temporarily stop sending signals and to resend the signals later.

Wago 852-1505 - Flow Control - 1

Note

Support for "Force Mode"

1000 BASE-T does not support "Force Mode."

7.2 Advanced Settings

7.2.1 Bandwidth Control

7.2.1.1 QoS

Each egress port can support up to eight “transmit queues.” Each transmit queue contains a list specifying the packet transmission order. Every incoming frame is forwarded to one of the eight egress transmit queues of the assigned egress port, based on its priority. The egress port transmits packets from each of the eight transmit queues according to a configurable sequence algorithm, which can be a combination of SP (“Strict Priority”) and/or WRR (“Weighted Round Robin”).

Normally, networks operate on a best-effort delivery basis, i.e., all data traffic has equal priority and an equal chance of being transmitted in a timely manner. If congestion occurs, all data traffic has an equal chance of being dropped.

When configuring the QoS (“Quality of Service”) function, you can select a specific data traffic, prioritize it according to its relative importance and use congestion management and congestion avoidance techniques to give preferential treatment.

Implementing QoS in a network improves network predictability and increases bandwidth utilization.

The industrial managed switch supports "802.1p Priority Queuing."

The switch has eight "Priority Queues." These priority queues are numbered, where Class 7 has the highest priority and Class 0 the lowest. The eight priority classes specified in IEEE 802.1p (p0 to p7) are mapped to the switch's priority queues as follows:

Priority01234567
Queue20134567

The “Priority Scheduling” is implemented in “Priority Queues.” The switch operates the four “Hardware Priority Queues” sequentially, where it starts with the highest “Priority Queue” (3) and ends with the lowest (0). Each “Hardware Queue” transmits all the packets in its buffer before the next lower priority is allowed to transmit its packets. If the lowest “Hardware Priority Queue” has transmitted all its packets, the highest starts again to transmit the packets that it received in the meantime.

QoS Enhancement

You can configure the switch to prioritize data traffic even if the incoming packets are not marked with "IEEE 802.1p Priority Tags" or change the existing "Priority Tags" based on criteria you select. The switch allows you to choose one of the following methods for assigning priority to incoming packets:

• 802.1p Tag Priority
- Assign priority to packets based on the packet's "802.1p Tag Priority."
- Port-based QoS
- Assign priority to packets based on the incoming port on the switch.

- DSCP-based QoS

- Assign priority to packets based on their DSCP ("Differentiated Services Code Points").

Note

Wago 852-1505 - Note - 1

Advanced QoS Methods

Advanced QoS methods only affect the internal "Priority Queue" mapping for the switch. The switch does not modify the IEEE 802.1p value for the egress frames.

You can choose one of these options above to alter the way incoming packets are prioritized, or you can choose not to use any QoS extension setting on the switch.

802.1p Priority

When the 802.1p priority mechanism is used, the packet is examined for the presence of a valid “802.1p Priority Tag.” If it has a tag, the packet is assigned to a configurable “Egress Queue” based on its priority value. The “Tag Priority” can be assigned to any of the available “Queues.”

ETHERNET Packet

66242-14964
DASAType/lengthDataFCS
664242-14964
DASA802.1Q TagType/lengthDataFCS

802.1Q Tag:

2 bytes2 bytes
Tag Protocol Identifier (TPID)Tag Control Information (TCI)
16 bits3 bit1 bit12 bits
TPID (0x8100)PriorityCFIVID

- TPID ("Tag Protocol Identifier")A 16-bit field is set to the value of 0x8100 to identify the frame as an "IEEE 802.1Q Tag Frame."

• TCI ("Tag Control Information")

- PCP ("Priority Code Point")

A 3-bit field that refers to the IEEE 802.1p priority. This indicates the frame priority level from 0 (lowest) to 7 (highest), which can be used to prioritize different classes of traffic (voice, video, data etc.).

- CFI ("Canonical Format Indicator")

A 1-bit field. If the value of this field is 1, the MAC address is in non-canonical format. If the value is 0, the MAC address is in canonical format. It is always set to 0 for ETHERNET switches. CFI is used for compatibility between ETHERNET and "Token Ring" networks. If a frame received at an ETHERNET port has a CFI of 1, the frame should not be output to an untagged port.

- VID ("VLAN Identifier")

A 12-bit field specifying the VLAN to which the frame belongs. A value of 0 means that the frame does not belong to any VLAN; in this case, the "802.1Q Tag" specifies only a priority and is referred to as a "Priority Tag." A hexadecimal value of 0xFFFF is reserved for implementation purposes. All other values may be used as "VLAN Identifiers," allowing support for up to 4094 VLANs. On "Bridges," VLAN 1 is often reserved for management.

Priority Levels

PCP ("Priority Code Point"):

Table 19: Priority Levels

PCPNetwork PriorityTraffic Characteristics
10 (lowest)“Background”
01“Best Effort”
22“Excellent Effort”
33“Critical Applications”
44Video, < 100 ms latency
55Video, < 10 ms latency
66Internetwork Control
77 (highest)Network Control

DiffServ (DSCP)

DiffServ ("Differentiated Services") is a computer networking architecture that specifies a simple, scalable and coarse-grained mechanism for managing network traffic and providing QoS ("Quality of Service") guarantees in modern IP networks. DiffServ can, for example, be used to provide low-latency GS ("Guaranteed Service") to critical network traffic such as voice or video data while providing simple "Best Effort" traffic guarantees to non-critical services such as Web traffic or file transfers.

DSCP ("Differentiated Services Code Point") is a 6-bit field in the header of IP packets for packet classification purposes. DSCP replaces the outdated IP precedence, a 3-bit field in the "Type of Service" byte of the IP header originally used to classify and prioritize types of traffic.

When using the DiffServ priority mechanism, a packet is classified based on the DSCP field in the IP header. If the tag is present, the packet is assigned to a programmable "Egress Queue" based on the value of its "Tagged Priority." The "Tagged Priority" can be assigned to any available "Queue."

VersionIHLType of ServiceTotal Length
MarkingFlagsFragment Offset
Time to LiveProtocolHeader Checksum
Source Address
Destination Address
OptionsPadding

Example Internet Data Packet Header

"Type of Service" in the IP header: 8-bit

The “Type of Service” field provides an indication of the abstract parameters of the “Quality of Service” desired. These parameters are used to guide the manual

selection of the actual service parameters when a data packet is to be transmitted through a particular network. Several networks offer service precedence, which treats high precedence traffic as more important than other traffic (generally by accepting only traffic above certain precedence level at high load times). The most favorable choice is a compromise between low delay, high reliability and high throughput.

Bits 0 ... 2Precedence.
Bit 30 = Normal delay,1 = Low delay.
Bit 40 = Normal throughput,1 = High throughput.
Bit 50 = Normal reliability,1 = High reliability.
Bits 6 ... 7Reserved for future use.

0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 +----+----+----+----+----+----+ | PRECEDENCE | D | T | R | 0 | 0 | +----+----+----+----+----+----+

Precedence

111 – Network Control

110 – Internetwork Control

101 - CRITIC/ECP

100 – Flash Override

011 – Flash

010 - Immediate

001 – Priority

000 – Routine

Specifying the Delay, Throughput and Reliability parameters can increase the service cost. In many networks, giving preference to one parameter entails a disadvantage for another. Except for very unusual cases, at most two of these three parameters should be specified.

“Type of Service” is used to specify the type of processing of the data packet while it is transmitted through a network. Example mappings of the “Internet Type of Service” to the actual service provided in networks, such as AUTODIN II, ARPANET, SATNET and PRNET, are specified in “Service Mappings.”

The Network Control precedence designation should only be used within a network. The actual use and control of that designation depends on the respective network. The Internetwork Control designation should only be changed by the initiators of the gateway control.

If these precedence designations apply to a specific network, it is the responsibility of that network to control the access to and use of those designations.

DSCPPriorityDSCPPriorityDSCPPriority
001020
...
600610620
620

Example:

IP Header

DSCP=50 -> 45 C8 ...

Queuing Algorithms

"Queuing Algorithms" can be used to maintain separate "queues" for packets, which can originate from any single source or any data flow, thus preventing one source from monopolizing the bandwidth.

SPQ

With SPQ ("Strict Priority Queuing"), the four "Hardware Priority Queues" are processed sequentially – the highest priority (3) first and the lowest (0) last. Each "Hardware Queue" transmits all the packets in its buffer before the next lower priority queue is allowed to transmit its packets. If the lowest "Hardware Priority Queue" has transmitted all its packets, the highest starts again to transmit the packets that it received in the meantime.

WRR

RR ("Round Robin") is a scheduling service that queues packets on a rotating basis and is only activated when a port has more traffic than it can handle. A limited amount of bandwidth is provided to a queue, irrespective of the incoming traffic on that port. This "queue" then moves to the back of the list. The next "queue" is given an equal amount of bandwidth and then moves to the end of the list and so on until all "queues" have been processed. The entire process works in a looping fashion until a "queue" is empty.

WRR ("Weighted Round Robin") scheduling uses the same algorithm as "Round Robin" scheduling, but services "queues" based on their priority and queue weight (the number you configure in the "Weight Value" field) rather than a fixed amount of bandwidth. WRR is activated only when a port has more traffic than it can handle. Processing "queues" with higher weights takes precedence over processing lower weight ones. This queuing mechanism is highly efficient in that it divides the entire available bandwidth among the various "Traffic Queues" and allocates it to the ones that have not yet been emptied.

Wago 852-1505 - WRR - 1

Note

DiffServ Function

DiffServ is disabled on the industrial managed switch. If the DiffServ is disabled, the "802.1p Tag Priority" is used.

7.2.1.2 Rate Limitation

7.2.1.2.1 Storm Control

A broadcast storm occurs when the network is overwhelmed with constant broadcast or multicast traffic. Broadcast storms can eventually lead to a complete loss of network connectivity as the packets proliferate.

"Storm Control" protects the switch bandwidth from packet flooding, including broadcast packets, multicast packets and DLF ("Destination Lookup Failure"). The Rate is a threshold that limits the total number of specific packet types. For example, if the broadcast and multicast options are selected, the total number of packets transmitted per second for these two types is not exceeded.

"Broadcast Storm Control" limits the number of broadcast, multicast and unknown unicast (also referred to as "Destination Lookup Failure" or DLF) packets the switch receives per second on the ports. If the maximum number of packets per second is reached, all subsequent packets are discarded. Enable this function to reduce the number of these packets in the network.

The “Storm Control” unit is 625 pps (packets per second).

7.2.1.2.2 Rate Limitation

The “Rate Limitation” is used to control the rate of traffic sent or received on a network interface.

7.2.2 IGMP Snooping

"IGMP Snooping" ("Internet Group Management Protocol Snooping") is used for multicast data traffic. The switch can passively "snoop" on IGMP packets transmitted between IP multicast routers/switches and IP multicast hosts to learn the IP multicast group membership. "IGMP Snooping" allows a switch to detect multicast groups without a user having to manually configure them.

It checks IGMP packets passing through it, reads the group registration information and configures multicasting accordingly.

The switch forwards multicast traffic to its multicast destination groups (which it has detected through “IGMP Snooping,” or which you have manually configured) to ports that are members of those groups. “IGMP Snooping” generates no additional network traffic, allowing you to significantly reduce multicast traffic passing through the switch.

The switch can perform "IGMP Snooping" on up to 4094 VLANs. You can configure the switch to automatically detect multicast group membership in all VLANs. The switch then performs "IGMP Snooping" on the first VLANs that send IGMP packets.

This is referred to as "Auto Mode." Alternatively, you can specify the VLANs that "IGMP Snooping" should be performed on. This is referred to as "Fixed Mode." In "Fixed Mode," the switch does not detect multicast group membership of any VLANs other than those explicitly added as an "IGMP Snooping" VLAN.

Immediate Leave

If you enable the “IGMP Immediate Leave” function, the switch immediately deletes a port when it receives a “Leave Message” with IGMP Version 2 on that port. You should use the “Immediate Leave” function only when there is a single receiver present on every port in the VLAN (“Immediate Leave” is only supported on IGMP Version 2 hosts).

The switch uses the “Immediate Leave” function with “IGMP Snooping” to remove from the forwarding table an interface that sends a “Leave Message,” without the switch having to send group-specific queries to the interface. The VLAN interface is deleted from the multicast tree for the multicast group specified in the original “Leave Message.” “Immediate Leave” ensures optimal bandwidth management for all hosts in a switched network, even when multiple multicast groups are simultaneously in use.

Fast Leave

The switch allows you to configure a delay time. When the delay time has expired, the switch deletes the interface from the multicast group.

Last Member Query Interval

The “Last Member Query Interval” is the maximum response time in group-specific queries sent in response to “Leave Group” messages, and also indicates the time between group-specific query messages.

Without Immediate Leave, when the switch receives an IGMP leave message from a subscriber on a receiver port, it sends out an IGMP-specific query on that port and waits for IGMP group membership reports. If no reports are received in a configured time period, the receiver port is removed from multicast group membership.

IGMP Querier

There is normally only one “Querier” per physical network. All multicast routers start up as a “Querier” on each connected network. If a multicast router receives a “Query Message” from a router with a lower IP address, it MUST become a non-“Querier” in that network. If a router does not receive any “Query Messages” from another router over a certain period of time (“Other Querier Present Interval”), it assumes the role of “Querier.” Routers periodically (“Query Interval”) send a “General Query” in all attached networks for which the router is the “Querier” in order to solicit membership information. At startup, a router SHOULD send “General Queries” (“Startup Query Count”) spaced closely together (“Startup Query Interval”) to quickly and reliably determine membership information. A “General Query” is addressed to an all-systems multicast group (224.0.0.1), has a group address field value of 0 and has a maximum response time of (“Query Response Interval”).

Port IGMP Querier Mode

- Auto

- The switch uses the port as an "IGMP Query Port" if the port receives "IGMP Query" packets.

- Fixed

- The switch always uses the port(s) as "IGMP Query Port(s)." This mode is used when connecting an IGMP multicast server to the port(s). - The switch always forwards the client's "Report/Leave" packets to the port. Normally, the port is connected to an IGMP server.

- Edge

- The switch does not use the port as an "IGMP Query Port."

- The "IGMP Query" packets received on this port are dropped. Normally, the port is connected to an IGMP client.

Wago 852-1505 - - Edge - 1

Note

Forwarding "IGMP Join/Leave" packets

The industrial managed switch will forward the “IGMP Join/Leave” packets to the query port.

IGMP Proxy Snooping

The “IGMP Proxy Snooping” can reduce the number of “Reports” and “Leaves” sent through an IGMP router.

Configurations

Users can enable/disable "IGMP Snooping" on the switch. This also applies to specific VLANs. If "IGMP Snooping" on the switch is disabled, it is disabled on all VLANs, even when enabled on some VLANs.

Wago 852-1505 - Configurations - 1

Note

VLAN States

There are a global state and individual VLAN states.

If the global state is disabled, "IGMP Snooping" on the switch is disabled even if individual VLAN states have been enabled.

If the global state is enabled for "IGMP Snooping," the function must be individually enabled by the user for specific VLANs.

7.2.2.1 MVR

MVR (“Multicast VLAN Registration”), through which a media server can transmit a multicast stream in an individual multicast VLAN and in which the clients receiving the VLAN stream can be located in different VLANs. Clients in different VLANs can join or leave the multicast group simply by sending an “IGMP Join Message” or “IGMP Leave Message” to a receiver port. The receiver port belonging to a multicast group can receive the multicast stream from the media server. Without MVR support, the multicast stream from the media server and subscriber would have to be in the same VLAN.

  • Source ports: The stream's source ports.
  • Receiver ports: The client's ports.
  • Tagged ports: Configure the tagged ports with tags to designate them as source ports or receiver ports.

MVR Mode

- Dynamic Mode

If we select the dynamic mode in the MVR settings, the IGMP report message transmitted from the receiver port will be forwarded to a multicast router through its source port. The multicast router can detect dynamically which multicast groups are on which interface.

- Compatibility Mode

If we select the dynamic mode in the MVR settings, the IGMP report message transmitted from the receiver port will not be transmitted to the source ports of the multicast router. The multicast router must be statically configured.

- Operating Mode

Join Operation

A subscriber sends an “IGMP Report Message” to the switch to join the respective multicast. The next step depends on whether the “IGMP Report Message” matches the multicast MAC address configured on the switch. If it matches, the switch CPU modifies the hardware address table to include this receiver port and VLAN as a forwarding destination of MVLAN.

- Leave Operation

A subscriber sends an "IGMP Leave Message" to the switch to leave the multicast. The switch CPU sends an IGMP group-specific query to the receiver port VLAN. If there is another subscriber in the VLAN, the subscriber must respond within the maximum response time. If there is no subscriber, the switch will remove this receiver port.

- Immediate Leave Operation

A subscriber sends an "IGMP Leave Message" to the switch to leave the multicast. The subscribers do not need to wait for the switch CPU to send a group-specific "IGMP Query" to the receiver port of the VLAN. The switch will immediately remove this receiver port.

Wago 852-1505 - - Immediate Leave Operation - 1

flowchart
graph TD
    A["MOD server"] --> B["Switch"]
    C["MOD with MVR"] --> B
    D["VLAN1"] --> B
    E["VLAN2"] --> B
    F["VLAN3"] --> B
    G["VLAN4"] --> B
    H["VLAN5"] --> B
    I["VLAN6"] --> B
    B --> J["Receiver Ports"]

Figure 13: MOD without MVR

Wago 852-1505 - - Immediate Leave Operation - 2

flowchart
graph TD
    A["MOD server"] --> B["MVR"]
    B --> C["Switch supports MVR"]
    C --> D["VLAN1"]
    C --> E["VLAN2"]
    C --> F["VLAN3"]
    C --> G["VLAN4"]
    C --> H["VLAN5"]
    C --> I["VLAN6"]
    D --> J["Receiver Ports"]
    E --> J
    F --> J
    G --> J
    H --> J
    I --> J

Figure 14: MOD Supports MVR

Default Configuration for a New MVR:

MVR VLAN information

VLAN ID: 2

Name: MVR2

Active: Enabled

Mode: Dynamic

Source port(s): None

Receiver port(s): None

Port(s) with tag: None

The switch allows the user to create up to 250 groups.

The switch allows the user to create up to 16 MVRs.

Wago 852-1505 - Default Configuration for a New MVR: - 1

Note

  • "IGMP Snooping" and MVR can be enabled independently.
  • "IGMP Snooping" and MVR use the same IGMP timer.
  • MVR can recognize IGMPv3 reports.
  • Both the switch and the following group record types do not treat group entries such as an IGMPv3 report as membership reports. The group record types are "MODE_IS_INCLUDE," "CHANGE_TO_INCLUDE_MODE," "ALLOW_NEW_SOURCES" and "BLOCK_OLD_SOURCES."
  • Do not use group address X.0.0.1 for your multicast stream. The system detects and logs the address 224.0.0.1 for the dynamic "Querier Port." The group address X.0.0.1 could cause a conflict with 224.0.0.1.
  • The lower 23 bits of the 28-bit multicast IP address are mapped to the 23 bits of the available ETHERNET address space.
  • When configuring the group address, the switch only compares the lower 23 bits.
  • The CLI command "group 1 start-address 224.1.1.1 6" creates six groups. That means that one IP corresponds to one group.
    • The MVR name should be a combination of numbers and letters.
    • The group name should be a combination of numbers and letters.

7.2.2.2 Multicast Address

A multicast address is associated with a group of interested receivers. According to RFC 3171, addresses 224.0.0.0 to 239.255.255.255 (formerly Class D addresses) are reserved as multicast addresses in IPv4.

The first octet (01) includes the broadcast/multicast bit. The lower 23 bits of the 28-bit multicast IP address are mapped to the 23 bits of the available ETHERNET address space. This means that there is an ambiguity in delivering packets. If two hosts on the same subnet each subscribe to different multicast groups whose addresses differ only in the first five bits, ETHERNET packets for both multicast groups are sent to both hosts, requiring the network software in the hosts to discard the unnecessary packets.

Table 20: Multicast Classes and Address Ranges

ClassAddress RangeSupport
Class A1.0.0.1 to 126.255.255.254Supports 16 million hosts on each of 127 networks.
Class B128.1.0.1 to 191.255.255.254Supports 65,000 hosts on each of 16,000 networks.
Class C192.0.1.1 to 223.255.254.254Supports 254 hosts on each of 2 million networks.
Class D224.0.0.0 to 239.255.255.255Reserved for multicast groups.
Class E240.0.0.0 to 254.255.255.254Reserved for future use or research and development purposes.

6 byte Offset 1 2 3 4 5 6 6. Byte 5. Byte 4. Byte 3. Byte 2. Byte 1. Byte 1. Octet 2. Octet 3. Octet 4. Octet 5. Octet 6. Octet highest rating or 3 byte 3 byte Organisationally Unique Identifier (OUI) Network Interface Controller (NIC) Specific 8 bit b8 b7 b6 b5 b4 b3 b2 b1 0: unicast 1: multicast 0: globally unique (OUI enforced) 1: locally administered

Figure 15: Multicast Address

Table 21: IP Multicast Addresses

IP Multicast AddressDescription
224.0.0.0Base address (reserved)
224.0.0.1“All Hosts Multicast” group that contains all systems on the same network segment.
224.0.0.2“All Routers Multicast” group that contains all routers on the same network segment.
224.0.0.5The “Open Shortest Path First” (OSPF protocol), the “AllSPFRouters” address. Used to send “Hello Packets” to all OSPF routers on a network segment
224.0.0.6The “OSPF AIDRouters” address. Used to send OSPF routing information to “OSPF Designated Routers” on a network segment
224.0.0.9The RIP (“Routing Information Protocol”) Version 2 of the group address. Used to send routing information to all RIPv2-compatible routers on a network segment.
224.0.0.10The EIGRP group address. Used to send EIGRP routing information to all EIGRP routers on a network segment.
224.0.0.13PIM Version 2 (“Protocol Independent Multicast”)
224.0.0.18Virtual Router Redundancy Protocol

Table 21: IP Multicast Addresses

IP Multicast AddressDescription
224.0.0.19 - 21IS-IS over IP
224.0.0.22IGMP Version 3 (“Internet Group Management Protocol”)
224.0.0.102Hot Standby Router Protocol Version 2
224.0.0.251Multicast DNS address
224.0.0.252“Link-local Multicast Name Resolution” address
224.0.1.1“Network Time Protocol” address
224.0.1.39“Cisco Auto-RP-Announce” address
224.0.1.40“Cisco Auto-RP-Discovery” address
224.0.1.41“H.323 Gatekeeper Discovery” address

7.2.3 VLAN

A VLAN (“Virtual LAN”) is a group of hosts with a common set of requirements that communicate as if they were attached to a broadcast domain, regardless of their physical location. A VLAN has the same attributes as a physical LAN, but it allows for end stations to be grouped together even if they are not located on the same network switch. Networks can be reconfigured through software instead of spatially separated devices.

VID ("VLAN-ID") is the identification of a VLAN that is generally used by the IEEE 802.1Q standard. It has 12 bits and allows the identification of 4096 ( 2^12 ) VLANs. Of the 4096 possible VIDs, VID 0 is used to identify "Priority Frames," and value 4095 (FFF) is reserved, so the maximum possible number of VLAN configurations is 4094.

A “Tagged VLAN” uses an explicit tag (VLAN ID) in the MAC header to identify the VLAN membership of a frame across “Bridges” – they are not confined to the switch on which they were created. VLANs can be created statically (manually by users) or dynamically via the GVRP (“GARP VLAN Registration Protocol”). The VLAN ID associates a frame with a specific VLAN and provides the information that switches need in order to process the frame across the network. A tagged frame is four bytes longer than an untagged frame and contains two bytes of TPID (“Tag Protocol Identifier,” residing within the type/length field of the “ETHERNET Frame”) and two bytes of TCI (“Tag Control Information,” which starts after the source address field of the “ETHERNET Frame”).

The CFI (“Canonical Format Indicator”) is a single-bit flag, always set to zero for ETHERNET switches. If a frame received at an ETHERNET port has a CFI of 1, the frame should not be output to an untagged port. The remaining 12 bits define the VLAN ID, giving a possible maximum number of 4096 VLANs. Note that the user priority and VLAN ID are independent of each other. A frame with VID (VLAN Identifier) of null (0) is called a priority frame, meaning that only the priority level is significant, and the default VID of the ingress port is used as the VID of the frame. Of the 4096 possible VIDs, a VID of 0 is used to identify “Priority Frames,” and value 4095 (FFF) is reserved, so the maximum possible number of VLAN configurations is 4094.

TPIDUser PriorityCFIVLAN ID
2 bytes3 bits1 bit12 bits

- Forwarded Tagged and Untagged Frames

Each port on the switch is capable of forwarding tagged and untagged frames. When a frame is forwarded from an 802.1Q VLAN-aware switch to an 802.1Q VLAN-unaware switch, the switch first decides where to forward the frame and then strips off the VLAN tag. When a frame is forwarded from an 802.1Q VLAN-unaware switch to an 802.1Q VLAN-aware switch, the switch first decides where to forward the frame and then inserts a VLAN tag reflecting the ingress port's default VID. The default PVID is "VLAN 1" for all ports, but this can be changed.

A broadcast frame (or a multicast frame for a multicast group that is known by the system) is duplicated only on ports that are members of the VID (except the ingress port itself), thus confining the broadcast to a specific domain.

• 802.1Q Port-Based VLAN

With port-based VLAN membership, the port is assigned to a specific VLAN independent of the user or system attached to the port. This means all users attached to the port should be subscribers of the same VLAN. The network administrator typically performs the VLAN assignment. The port configuration is static and cannot be automatically changed to another VLAN without manual reconfiguration.

As with other VLAN approaches, the packets forwarded using this method are not transmitted to other VLAN domains or networks. After a port has been assigned to a VLAN, the port cannot send to or receive from devices in another VLAN without the intervention of a Layer 3 device.

The device that is attached to the port likely has no understanding that a VLAN exists. The device simply knows that it is part of a subnet and should be able to talk to all other network subscribers by simply sending information via the cable connection. The switch is responsible for identifying information that came from a specific VLAN and for ensuring that the information gets to all other subscribers of the VLAN. The switch is also responsible for ensuring that ports in a different VLAN do not receive the information.

This approach is quite simple, fast and easy to manage, because there are no complex lookup tables required for VLAN segmentation. If the “Port-to-VLAN” connection is designed with an application-specific integrated circuit (ASIC), performance is very good. An ASIC allows “Port-to-VLAN” mapping at the hardware level.

7.2.3.1 Port Isolation

Port isolation is a port-based virtual LAN feature. It partitions the switching ports into virtual private domains designated on a per port basis. Data switching outside of the switch's private domain is not allowed. The VLAN tag information of the packets is ignored.

This feature is a per-port setting to configure the egress port(s) for the specific port to forward its received packets. If the CPU port (port 0) is not an egress port for a specific port, the host connected to the specific port cannot manage the switch.

If you wish to allow two subscriber ports to talk to each other, you must define the egress port for both ports. CPU refers to the switch's management port. By default, it forms a VLAN with all ETHERNET ports. If it does not form a VLAN with a specific port, then the switch cannot be managed from that port.

7.2.3.2 GARP/GVRP

GARP ("Generic Attribute Registration Protocol") and GVRP ("GARP VLAN Registration Protocol" or "Generic VLAN Registration Protocol") are industry-standard protocols described in IEEE 802.1p. GVRP is a GARP application that provides 802.1Q-compliant "VLAN Pruning" and dynamic VLAN creation on "802.1Q Trunk Ports."

With GVRP, the switch can exchange VLAN configuration information with other GVRP switches, prune unnecessary broadcast and unknown unicast traffic and dynamically create and manage VLANs on switches that are connected through "802.1Q Trunk Ports."

GVRP makes use of GID (“Group Identification”) and GIP, which provide the common “State Machine Descriptions” and the common information propagation mechanisms defined for use in GARP-based applications. GVRP runs only on “802.1Q Trunk Links.” GVRP prunes “Trunk Links” so that only active VLANs are transmitted across trunk connections. GVRP waits to hear join messages from the switches before adding a VLAN to the trunk. GVRP updates and hold timers can be altered. GVRP ports run in various modes to control how they prune VLANs. GVRP can be configured to dynamically add and manage VLANS in the VLAN database for “Trunking” purposes.

In other words, GVRP allows the propagation of VLAN information from device to device. With GVRP, a single switch is manually configured for all VLANs required for the network, and all other switches on the network detect these VLANs dynamically. End nodes can be plugged into any switch and connected to the required VLAN. For end nodes to make use of GVRP, they need GVRP-aware network interface cards (NICs). The GVRP-aware NIC is configured with the desired VLAN or VLANs and then connected to a GVRP-enabled switch. The NIC communicates with the switch once connectivity is established between the NIC and switch.

Registration Mode:

- Normal

The “normal” registration mode allows dynamic creation (if dynamic VLAN creation is enabled), registration and deregistration of VLANs on the trunk port. “Normal” mode is the default setting.

- Forbidden

The “forbidden” registration mode deregisters all VLANs (except VLAN 1) and prevents further creation or registration of VLANs on the trunk port.

- Fixed

The “fixed” registration mode allows manual creation and registration of VLANs, prevents VLAN deregistration and registers all known VLANs on other ports on the trunk port. (The same applies to the static VLAN.)

GVRP Timer:

- Join Timer

The “Join Timer” specifies the maximum time in milliseconds that interface waits before sending VLAN messages.

- Leave Timer

The “Leave Timer” specifies the maximum time in milliseconds an interface waits after receiving a “Leave Message” before the interface leaves the VLAN specified in the message.

- Leaveall Timer

The “Leaveall Timer” specifies the interval in milliseconds at which “Leaveall Messages” are sent on interfaces. “Leaveall Messages” help to update GVRP VLAN subscriber information in the network.

7.2.3.3 Q-in-Q

“Q-in-Q Tunneling” is also known as “VLAN Stacking.” This uses 802.1Q double tagging technology. Q-in-Q is used by ISPs (Internet Service Providers) that need TLSs (“Transparent LAN Services”) and that have their own VLANs, independent of customer VLANs. Normally, each service provider VLAN interconnects a group of sites belonging to a customer. However, a service provider VLAN could also be shared by a set of customers sharing the same end points and QoS requirements of the VLAN. “Double Tagging” is considered to be a relatively simple way of implementing a transparent LAN. This is accomplished by encapsulating “ETHERNET Frames.” A second or outer VLAN tag is inserted into the “ETHERNET Frames” sent over the ingress PE (“Provider Edge”). This VLAN tag corresponds to the VLAN of the service provider. If the frame reaches the destination PE, the service provider VLAN opens. The destination address of the encapsulated frame and VLAN ID are used for other L2 decisions, similar to an “ETHERNET Frame” that arrives from a physical ETHERNET port. The service provider VLAN tag determines the membership in the VPLS (“Virtual Private LAN Service”). Double tagging aggregates multiple VLANs within another VLAN and allows a private dedicated ETHERNET connection between customers who want to reach their subnet transparently across multiple networks. Service providers can create their own VLANs without coming in contact with customer VLANs via “Double Tagging.” This allows customers to connect to ISPs and ASPs (“Application Service Providers”).

The ports that are connected to the service provider VLANs are called tunnel ports, and the ports that are connected to the customer VLANs are called access (subscriber/customer) ports. If a port is configured as tunnel port, all outgoing packets on this port are transmitted with an SPVLAN tag (SPVID and 1p priority). The incoming packet can have two tags (SPVLAN + CVLAN), one tag (SPVLAN or CVLAN) or no tag. In all cases, the packet is sent out with a SPVLAN tag. If a port is configured as an access port, the incoming traffic can only have a CVLAN tag (CVID and 1p priority) or no tag. Hence, all the packets sent from access ports are untagged or single tagged (CVLAN). If a port is configured as a normal port, it ignores “Double Tagging Frames.”

Double Tagging Format

A VLAN tag (service provider "VLAN Stacking" or customer IEEE 802.1Q) consists of the following three fields:

TPIDPriorityVID

TPID

TPID ("Tag Protocol Identifier") is a standard ETHERNET code identifying the frame and indicating whether the frame contains IEEE 802.1Q tag information. The value of this field is 0x8100 as described in IEEE 802.1Q. Other providers may use a different value, such as 0x9100.

"Tunnel TPID" is the "VLAN Stacking" tag type that the switch adds to the outgoing frames sent through a tunnel port of the service provider's PE devices.

Priority

The priority relates to the IEEE 802.1p standard that allows the service provider to prioritize traffic based on the class of service (CoS) the customer has paid for. "0" is the lowest priority level and "7" is the highest.

VID

VID ("VLAN ID"). SP VID is the VID for the second or outer VLAN tag (of the service provider). CVID is the VID for the first or inner VLAN tag (of the customer).

The frame formats for an untagged “ETHERNET Frame,” a single-tagged 802.1Q frame (customer) and a double-tagged 802.1Q frame (service provider) are shown as follows.

Untagged frameDALen or EtypeDataFCS
Single-tagged frameDASATPIDPVIDLen or EtypeDataFCS
Double-tagged frameDASATunnel TPIDPVIDTPIDPVIDLen or EtypeDataFCS
DA Destination Address
SA Source Address
Tunnel TPID “Tag Protocol Identifier” added to a “Tunnel Port”
VID VLAN ID
Len or Etype Length or ETHERNET frame type
Data Frame data
FCS Frame Check Sequence (checksum field)

VLAN Stacking Port Roles

For “VLAN Stacking,” each port can have one of three “roles”: Normal, “Access Port” or “Tunnel Port.”

  • Select "normal" for normal (no "VLAN Stacking") IEEE 802.1Q frame switching.
  • Select “Access Port” for ingress ports on PE devices of the service provider. The incoming frame is treated as “untagged,” so a second VLAN tag (outer VLAN tag) can be added.
  • Select “Tunnel Port” for egress ports at the edge of the service provider’s network. All VLANs belonging to a customer can be aggregated into a single service provider’s VLAN (using the outer VLAN tag defined by SP VID).

Wago 852-1505 - VLAN Stacking Port Roles - 1

Note

Q-in-Q Configuration

For the double-tagged frames to switch correctly, users have to configure a service provider's VLAN (SPVLAN) on the Q-in-Q switch. The double-tagged frames can then be switched according to the SP VID. The SPVLAN should include all related "Tunnels" and "Access Ports." Also, the tunnel ports have to be configured as tagged ports and the access ports as untagged ports.

7.2.3.3.1 Port-Based Q-in-Q

Q-in-Q encapsulation can be used to convert a single-tagged 802.1Q packet into a double-tagged Q-in-Q packet. The Q-in-Q encapsulation can be based on port or traffic. Port-based Q-in-Q can be used to encapsulate all incoming packets in a port with the same SPVID outer tag. This mode is less flexible.

In the following example figure, both X and Y are Service Provider's Network (SPN) customers with VPN tunnels between their respective head offices and branch offices. Both have an identical VLAN tag for their VLAN group. The service provider can separate these two VLANs within its network by adding tag 100 to distinguish customer X and tag 200 to distinguish customer Y at PE device A and then stripping those tags at PE device B as the data frames leave the network.

Wago 852-1505 - Port-Based Q-in-Q - 1

flowchart
graph TD
    A["Router X: VLAN 20"] --> B["Router X: 200, 20"]
    B --> C["Router Y: 100, 10"]
    C --> D["Router Y: VLAN 10"]
    A --> E["Router X: VLAN 20"]
    B --> F["Router Y: VLAN 10"]
    C --> G["Router Y: VLAN 10"]

Figure 16: Port-Based Q-in-Q

This example shows how to configure switch A with port 1 on the switch in order to tag incoming frames with the service provider's VID of 200 (ports connected to customer X network) and configure port 7 to the service provider's VID of 100 (ports connected to customer Y network). This example also shows how to set the priority for port 1 to 3 and port 7 to 4.

7.2.3.3.2 Selective Q-in-Q

Traffic-based Q-in-Q is also called selective Q-in-Q. Selective Q-in-Q allows the switch to add different outer VLAN tags to the incoming frames received on one port according to their inner VLAN tags. In selective Q-in-Q mode, the switch classifies the incoming traffic on a port based on the VLAN ID. When a user uses different VLAN IDs for different services, traffic can be classified according to the VLAN ID. Example: VLAN ID 100 for surfing the Internet on a PC, VLAN ID 200 for IPTV and VLAN ID 300 for VIP customers. After receiving user data, the switch labels the traffic for surfing the Internet on a PC with 500 as a SPVID outer tag, IPTV with 600 and VIP customers with 700.

This following example shows how to configure port 3 on the switch to tag incoming frames with the different VIDs and priorities of the service provider.

700, 40 600, 30 500, 20 VLAN 40 VLAN 30 VLAN 20

Figure 17: Configuration Example

7.2.4 DHCP Relay

Because the “DHCPDISCOVER” message is a broadcast message, and broadcasts only cross other segments when they are explicitly routed, you might have to configure a “DHCP Relay Agent” on the router interface so that all “DHCPDISCOVER” messages can be forwarded to your DHCP server.

Alternatively, you can configure the router to forward DHCP messages and BOOTP message. In a routed network, you would need "DHCP Relay Agents" if you plan to implement only one DHCP server.

The “DHCP Relay,” which is either a host or an IP router, waits for DHCP client messages to be broadcast on a subnet and then forwards those DHCP messages directly to a configured DHCP server. The DHCP server sends DHCP response messages directly back to the “DHCP Relay Agent,” which then forwards them to the DHCP client. The DHCP administrator uses “DHCP Relay Agents” to centralize DHCP servers, avoiding the need for a DHCP server on each subnet.

Most of the time in small networks, DHCP uses broadcasts, but there are some circumstances where unicast addresses are used. This can be the case when networks have a single DHCP server that provides IP addresses for multiple subnets. A router for such a subnet receives the DHCP broadcasts, converts them to unicast (with a MAC/IP destination address of the configured DHCP server, MAC/IP source address of the router itself). The GIADDR field on the main DHCP page contains the IP address of the interface on the router on which it received the DHCP request. The DHCP server uses the GIADDR field to identify the subnet for the device and selects an IP address from the correct pool. After that, the DHCP server sends the “DHCP OFFER” back to the router via unicast, which then converts it back to a broadcast and sends it out to the correct subnet containing the device that requested an address.

Configurations

A user can enable/disable the "DHCP Relay" on the switch. It can also be enabled/disabled on a specific VLAN. If "DHCP Relay" is disabled on the switch, it is disabled on all VLANs, even if enabled for individual VLANs.

Applications

• Application 1 (via a router)

DHCP client 1 and DHCP client 2 are in different IP segments. However, they receive the IP address from the same DHCP server.

Wago 852-1505 - • Application 1 (via a router) - 1

flowchart
graph LR
    A["DHCP-Client 1"] <--> B["Switch"]
    B <--> C["Router"]
    C <--> D["Switch"]
    D <--> E["DHCP-Client 2"]
    E <--> F["DHCP-Server"]
    F <--> D

Figure 18: Application 1 (via a Router)

• Application 2 (local in different VLANs)

DHCP client 1 and DHCP client 2 are in different VLANs. However, they receive the IP address from the same DHCP server.

Switch DHCP Relay Agent
1 2 3 4 5 6 7 8 Server Client Client Client Client Client Client Client Client Client

Figure 19: Application 2 (Local in Different VLANs)

VLAN 1: Port 1, 2 (Management VLAN)

VLAN 2: Port 3, 4

VLAN 3: Port 5, 6

VLAN 4: Port 7, 8

DHCP Server -> Port 1.

DHCP Client -> Port 2, 3, 4, 5, 6, 7, 8.

Result: Hosts connected to port 2, 3, 4, 5, 6, 7 and 8 receive an IP from the DHCP server.

Note

Wago 852-1505 - Note - 1

DHCP Server Connection

The DHCP server must connect to the management VLAN member ports. The "DHCP Relay" in the management VLAN must be enabled.

7.2.5 DHCP Relay Option 82

“DHCP Option 82” (“DHCP Relay Agent Information Option”). Option 82 was designed to allow a “DHCP Relay Agent” to insert circuit-specific information into a request that is being forwarded to a DHCP server. Specifically, the option works by setting two sub-options: “Circuit ID” and “Remote ID.”

“DHCP Option 82” operates on the basis of “DHCP Snooping” or/and “DHCP Relay.”

The switch monitors the DHCP packets and appends some information under "DHCPDISCOVER" and "DHCPREQUEST" packets. The switch deletes "DHCP Option 82" from the "DHCPOFFER" and "DHCPACK" packets. The DHCP server then assigns an IP domain to the client based on this information.

The maximum length for this information is 32 characters.

In residential, metropolitan ETHERNET-access environments, DHCP can centrally manage the IP address assignments for a large number of subscribers. If the “DHCP Option 82” function is enabled on the switch, a subscriber device is identified by the switch port through which it connects to the network (in addition to its MAC address). Multiple hosts on the subscriber LAN can be connected to the same port on the switch and are uniquely identified.

If you enable "DHCP Snooping Information Option 82" on the switch, the sequence of events is:

  • The host (DHCP client) generates a DCHP request and broadcasts it on the network.
  • If the switch receives the DHCP request, it adds the "Option 82" information to the packet. The information contains the switch MAC address (the "Remote ID" sub-option), the "Port Identifier" and the "VLAN-Mod-PORT" from which the packet is received (the "Circuit ID" sub-option).
  • If the IP address of the "Relay Agent" has been configured, the switch adds the IP address to the DHCP packet.
  • The switch forwards the DHCP request that includes the Option 82 field to the DHCP server.
  • The DHCP server receives the packet. If the server is Option 82 capable, it can use the “Remote ID,” “Circuit ID” or both to assign IP addresses and implement policies, such as restricting the number of IP addresses that can be assigned to a single “Remote ID” or “Circuit ID.” The DHCP server then echoes the Option 82 field in the DHCP reply.
  • The DHCP server forwards the reply to the switch as a unicast if the request was relayed to the server by the switch. If the client and server are on the same subnet, the server broadcasts the reply. The switch verifies the Option 82 data originally entered by checking the “Remote ID” and “Circuit ID” fields. The switch deletes the Option 82 field and forwards the packet to the switch port that connects to the DHCP client that sent the DHCP request.

Option Frame Format

Table 22: Option Frame Format

CodeLenAgent Information Field
82Ni1i2i3i4...iN

The “Agent Information Field” consists of a sequence of SubOpt/Length/Value tuples for each sub-option, encoded in the following manner:

Table 23: Option Frame Format

Sub-OptionLenSub-Option Value
1Ns1s2s3s4...sN

DHCP Agent Sub-Option Description

Sub-Option Code

1 "Agent Circuit ID" sub-option
2 "Agent Remote ID" sub-option

Table 24: Frame Format of the "Circuit ID" Sub-Option

Sub-Option TypeLength“Circuit ID” TypeLengthVLANModulePort
1604211

Table 25: Frame Format of the "Remote ID" Sub-Option

Sub-Option TypeLength“Circuit ID” TypeLengthMAC Address
28066

Table 26: Format of the "Circuit ID" Sub-Option

CodeLenSub-Option TypeLengthSlot IDPort IDVLAN IDInformation
0x520x0c0x010x0a0x010x010x0002justin

7.2.6 Dual Ring

The “Dual Ring” function can be used to connect two neighboring rings to each other on a switch without the need for additional ports or cables. This configuration reduces the total number of required ports and the wiring costs, because no additional wiring is required.

Wago 852-1505 - Dual Ring - 1

flowchart
graph TD
    A["Sub Ring"] --> B["Xpress Ring"]
    B --> C["Jet Ring"]
    C --> D["Sub Ring"]
    D --> E["Jet Ring"]
    E --> F["Sub Ring"]
    F --> G["Jet Ring"]
    G --> H["Sub Ring"]
    H --> I["Jet Ring"]
    I --> J["Sub Ring"]
    J --> K["Jet Ring"]
    K --> L["Sub Ring"]
    L --> M["Jet Ring"]
    M --> N["Sub Ring"]
    N --> O["Jet Ring"]
    O --> P["Sub Ring"]
    P --> Q["Jet Ring"]
    Q --> R["Sub Ring"]
    R --> S["Jet Ring"]
    S --> T["Sub Ring"]
    T --> U["Jet Ring"]
    U --> V["Sub Ring"]
    V --> W["Jet Ring"]
    W --> X["Sub Ring"]
    X --> Y["Jet Ring"]

Figure 20: Dual Ring Switch ABC
Wago 852-1505 - Dual Ring - 2

flowchart
graph TD
    A["Sub Ring"] -->|6| B["A2"]
    A -->|5| C["A3"]
    A -->|6| D["B1"]
    A -->|5| E["B2"]
    A -->|6| F["Xpress Ring"]
    F -->|8| G["C"]
    F -->|9| H["D"]
    F -->|8| I["B"]
    F -->|9| J["B"]
    F -->|9| K["B"]

Figure 21: Dual Ring Switch AB

7.2.7 ERPS

The ERPS ("ETHERNET Ring Protection Switching") function implements a protection switching mechanism for ETHERNET layer ring topologies according to ITU-T standard G.8032. The ERP ("ETHERNET Ring Protection") protects ETHERNET traffic in a ring topology and ensures that no loops can arise within the ring in the ETHERNET layer. Looping is prevented by blocking traffic on either a predetermined link or a failed link.

The ETHERNET ring protection functionality includes the following:

  • Loop avoidance
    • Use of learning, forwarding and filter database (FDB) mechanisms

Loop avoidance in an Ethernet ring is achieved by guaranteeing that, at any time, traffic may flow on all but one of the ring links. This particular ring link serves as a reserve connection and is called an RPL ("Ring Protection Link"). In normal operation, it is blocked and not used for service traffic. A specific ETHERNET ring node, the "RPL Owner" node, is responsible for blocking traffic at one end of the RPL. Under an ETHERNET ring failure condition, the "RPL Owner" node is responsible for unblocking its end of the RPL, unless the RPL has failed, allowing the RPL to be used for traffic. The ETHERNET ring node adjacent to the RPL, the "RPL Neighbor" node, may also participate in blocking or unblocking its end of the RPL.

The ETHERNET rings can support a multi-ring/ladder network that consists of ETHERNET rings linked through one or more interconnection points. The protection switching mechanisms and protocol defined in this recommendation can be used for a multi-ring/ladder network under the following conditions:

• R-APS channels are not shared across ETHERNET ring connections;
- On each ring port, all traffic channels and all R-APS channels are controlled (e.g., for blocking or flushing) by the ETHERNET ring protection control process (ERP control process) of only one ETHERNET ring;
• Each main ring or subring has its own RPL.

In an ETHERNET ring without congestion, with all ETHERNET ring nodes in the idle state (i.e., no detected failure, no active automatic or external command and receiving only R-APS (NR, RB) messages) and with less than 1,200 km of ring fiber circumference and fewer than 16 ETHERNET ring nodes, the switch completion time (transfer time as defined in [ITU-T G.808.1]) for a failure on a ring link should be less than 50 ms.

The ring protection architecture relies on the existence of an APS protocol to coordinate ring protection actions in an ETHERNET ring.

The switch supports up to six rings.

Guard Timer

All ring subscribers use a “Guard Timer.” It prevents a closed loop from forming and prevents ring subscribers from using outdated R-APS messages. The “Guard Timer” is enabled if a ring subscriber received information on a local switching request, such as after SF (“Switch Fail”), MS (“Manual Switch”) or FS (“Forced Switch”) commands. When the timer expires, the ring subscriber begins executing the actions it received from the R-APS. This timer cannot be stopped manually.

WTR Timer

The "WTR Timer" ("Wait To Restore Timer") is used by the "RPL Owner." The WTR timer applies to the revertive mode to prevent frequent triggering of the protection switching due to port flapping or intermittent signal failure defects. When the timer expires, the "RPL Owner" sends an R-APS (NR, RB) message through the ring.

WTB Timer

The “WTB Timer” (“Wait To Block Timer”) is enabled on the “RPL Owner.” The “RPL Owner” uses “WTB Timers” before initiating an RPL block and then reverting to the idle state after operator-initiated commands, such as for FS or MS conditions, are entered. Because multiple FS commands are allowed to co-exist in a ring, the “WTB Timer” ensures that clearing a single FS command does not trigger the re-blocking of the RPL. The “WTB Timer” should run five seconds longer than the “Guard Timer” – enough time to allow a reporting ring subscriber to receive two R-APS messages and to allow the ring to identify the latent state. When clearing a MS command, the “WTB Timer” prevents the formation of a closed loop, because the “RPL Owner” node does not respond to an outdated remote MS request during the recovery process.

Hold-off Timer

Each ring subscriber uses a “Hold-off Timer” to delay reporting a port failure. When the timer expires, the ring subscriber checks the port status. If the problem persists, a failure is reported. If the issue does not persist, nothing is reported.

ERPS Revertive and Non-Revertive Switching

ERPS uses revertive and non-revertive operation. In revertive operation, after the conditions causing a switch have cleared, the traffic channel is restored to the working transport entity, i.e., blocked on the RPL. After an error condition is cleared, the traffic channel is switched back only after expiration of a "WTR Timer" to prevent protecting states from toggling due to intermittent errors. Without revertive operation, the traffic channel continues to use RPL after a switch condition is cleared if the RPL has not failed.

Control VLAN

The “Control VLAN” is a domain in which only ERPS control packets are transmitted. Because no other packets are transmitted in the VLAN, there are no delays for the ERPS. Therefore, when configuring a control VLAN for a ring, make sure it is a new VLAN. The ERPS creates this control VLAN and its member ports automatically. The member port should have a left right port only.

In ERPS, control packets and data packets are separated in different VLANs. The control packets are transmitted in a control VLAN.

Instance

For ERPS Version 2, an instance is a profile that specifies a control VLAN and one or more data VLANS for the ERPS. The control and data packets in ERPS are separated in different VLANs. The control packets are transmitted in the control VLAN and the data packets in one or more data VLANs. In this way, a user can easily assign an instance to an ERPS ring.

If a port is blocked by the ERPS in ERPS Version 1, all packets are blocked.

If a port is blocked by an ERPS ring in ERPS Version 2, only the packets belonging to the VLANs in this instance are blocked.

Wago 852-1505 - Instance - 1

Note

Control VLAN and Instance

In CLI or Web configurations, there are settings for the control VLAN and the instance. If the control VLAN is configured for a ring and an instance is to be configured for the ring, the control VLAN must be the same for the instance as that of the ring. Otherwise, an error is displayed. If you still want to use this instance, you can first change the control VLAN so that it is the same as that of the instance. You can the configure the instance.

7.2.8 Dual Homing

"Dual Homing" is a network topology in which a device is connected to the network by way of two independent access points ("Points of Attachment"). One access point establishes the primary connection, and the other is a reserve in case the primary connection fails.

Wago 852-1505 - Dual Homing - 1

flowchart
graph TD
    A["Main Campus Backbone Network"] --> B["IDP"]
    A --> C["IDP"]
    B --> D["GE Switch"]
    C --> E["GE Switch"]
    D --> F["Server 1"]
    D --> G["Server 2"]
    E --> H["Server N"]
    style A fill:#f9f,stroke:#333
    style B fill:#ccf,stroke:#333
    style C fill:#ccf,stroke:#333
    style D fill:#cfc,stroke:#333
    style E fill:#cfc,stroke:#333
    style F fill:#fcc,stroke:#333
    style G fill:#fcc,stroke:#333
    style H fill:#fcc,stroke:#333
    note right of A: Legend: active connection
    note right of C: standby connection

Figure 22: Dual Homing

Primary and secondary connections, for example, can be connected to the Internet in different ways. The primary connection could be connected to a physical network and the secondary to a wireless network. If the “Dual Homing” function is enabled, a device connects via the primary connection by default, while the secondary connection remains suspended. If the port or all ports of the primary connection fail, the device switches to the secondary connection. If the secondary connection also fails, the device remains inactive. The secondary connection only works if the primary connection is interrupted.

7.2.9.1 Static Trunk

“Ling Aggregation” (also called “Trunking” – parallel link bundling) is the grouping of physical ports into one logical link with higher capacity. When bundling ports, it can be more cost effective to use multiple lower-speed links than to underutilize a high-speed but expensive “Port Link.”

However, the more ports you aggregate, the fewer available ports you have. A "Trunk Group" is one logical link containing multiple ports. The switch supports both static and dynamic "Link Aggregation."

Wago 852-1505 - Static Trunk - 1

Note

In a well-planned network, only static “Link Aggregation” is recommended. This ensures increased network stability and control over “Trunk Groups” on your switch.

7.2.9.2 LACP

The switch supports static and dynamic (LACP) "Port Trunking" according to IEEE 802.3ad. The IEEE 802.3ad standard describes LACP ("Link Aggregation Control Protocol") for dynamic creation and management of "Trunk Groups."

When you enable “LACP Link Aggregation” on a port, the port can automatically negotiate with the ports at the remote end of a link to establish “Trunk Groups.” LACP also allows port redundancy – that is, if an operational port fails, then one of the “standby” ports become operational without user intervention. The following should be noted:

  • All ports must be connected peer-to-peer to the same ETHERNET switch and configured for "LACP Trunking."
    • LACP only works on full-duplex links.
  • All ports in the same “Trunk Group” must have the same media type, speed, duplex mode and settings for “Flow Control.”
  • Configure the "Trunk Groups" or LACPs before you connect to the ETHERNET switch to prevent looping in the network topology.

System Priority

LACP system priority is used to determine membership in an LAG (“Link Aggregation Group”) and identifies the device for other switches during LAG negotiations.

The switch with the lowest system priority (and lowest port number, if system priority is the same) becomes the LACP “server.” The server controls the operation of the LACP settings. The smaller the number, the higher the priority level.

System ID

The "LACP System ID" is a combination of the LACP system priority value and the MAC address of the router.

Administrative Key

The “Administrative Key” defines the ability of a port to aggregate with other ports. This ability is determined by the following factors:

  • The physical properties of the port, e.g., data rate, duplex capability and peer-to-peer or shared transmission medium.
  • The configuration restrictions that you establish.

Port Priority

The port priority determines which ports should be put in standby mode when there is a hardware limitation that prevents all compatible ports from aggregating.

7.2.10 LLDP

The LLDP (“Link Layer Discovery Protocol”) described in this standard allows stations connected to a LAN according to IEEE 802® to send information to other stations connected to the same LAN. The information includes essential system functions, including the management address or addresses of an entity or entities that provide management of these functions, as well as identification of the station’s access point to the IEEE802 LAN required by the management entity or entities.

The information distributed via this protocol is stored by the recipients in a normal MIB (“Management Information Base”). This allows an NMS (“Network Management System”) to access the information using a management protocol such as SNTP (“Simple Network Management Protocol”).

7.2.11 Loop Detection

“Loop Detection” handles problems with loops in the network periphery. These problems can occur if a port is connected to a switch that is in a loop state. A loop state occurs as a result of user error. It happens when two ports on a switch are connected with the same cable. When a switch in loop state sends out broadcast messages, the messages loop back to the switch and are re-broadcast again and again, causing a “Broadcast Storm.”

The “Loop Detection” function sends probe packets periodically to detect whether the port is connected to a network in loop state. The switch shuts down a port if the switch detects probe packets looping back to the same port.

Loop Recovery

When “Loop Detection” is enabled, the switch sends a probe packet every two seconds and waits to receive the packet. If it receives the packet at the same port, the switch disables the port. After a defined time period (“Recovery Time”), the switch reenables the port and executes “Loop Detection” again.

The switch generates a "Syslog" (system log), internal log messages and "SNMP Traps" if it disables a port after "Loop Detection."

7.2.12 Jet Ring

Setting up the Jet Ring function (redundant connection) in a network better protects critical connections against errors and network loops. In addition, network downtime is reduced to less than 300 ms.

The Jet Ring function can be used to set up a secondary path to the network. A data transmission safety route is then provided in case there is an abrupt interruption in a connection. This function is extremely important for industrial applications because connection errors without safeguards for network downtime can last several minutes and result in heavy losses.

The Jet Ring protocol is used to optimize secondary communication links and to ensure very short connection recovery time. The Jet Ring function is used to automatically identify a switch as the network “Master” and to automatically block connections. This prevents packets from being broadcast to all secondary loop segments of a network. If a ring segment is separated from the rest of the network due to a connection error, the Jet Ring protocol automatically adjust the ring again to restore the connection between the part of the network that was separated and the rest of the network.

Step 1

The Jet Ring function in the graphic below is applicable to connecting industrial managed switches.

Wago 852-1505 - Step 1 - 1

flowchart
graph TD
    A["Master"] -->|1| B["4"]
    B -->|4| C["3"]
    C -->|3| D["2"]
    D -->|2| E["1"]
    E -->|1| A
    style A fill:#f9f,stroke:#333
    style B fill:#bbf,stroke:#333
    style C fill:#bfb,stroke:#333
    style D fill:#ffb,stroke:#333
    style E fill:#fbb,stroke:#333

Figure 23: Jet Ring

Step 2

The Jet Ring function is used to automatically select the Arbiter switch. The network then ready for operation.

7.2.13 STP

The (R)STP (“(Rapid) Spanning Tree Protocol”) can detect and stop network loops, as well as provide “Backup Links” between switches, bridges or routers. It allows a switch to interact with other (R)STP-compliant switches in the network to ensure that only one path exists between any two stations on the network.

The switch supports both STP and RSTP as defined in the following standards:

  • IEEE 802.1D Spanning Tree Protocol
  • IEEE 802.1w Rapid Spanning Tree Protocol

The switch uses IEEE 802.1w RSTP, which allows faster convergence of the "Spanning Tree" than STP (the switch is also backwards-compatible with STP-only aware bridges). In RSTP, topology change information is directly propagated throughout the network from the device that generates the topology change. In STP, there are longer delays because the device that causes a topology change first notifies the "Root Bridge" and then the network. Both RSTP and STP remove unwanted learned addresses from the filtering database.

• In STP, the port states are Blocking, Listening, Learning and Forwarding.
• In RSTP, the port states are Discarding, Learning and Forwarding.

STP Switch Port States

- "Blocking"

If a port causes a “Switching Loop” (looping connection between two ports), user data can no longer be sent or received. However, the port can go into the “Forwarding” state if the other active connections fail and the “Spanning Tree” algorithm determines that the port may transition to that state. BPDU data is still received and sent in the “Blocking” state.

- "Listening"

The switch processes BPDUs and waits for possible new information that would cause it to return to the “Blocking” state.

- "Learning"

Even if the port does not yet forward any frames (packets), it can learn source addresses from frames received and add them to the filter database ("Switching Database").

- “Forwarding”

The port is in normal operating mode and receives and sends data. STP still monitors incoming BPDUs that would indicate that the port should return to the “Blocking” state to prevent a loop.

- “Disabled”

It is not strictly part of the STP because a network administrator can manually disable a port.

RSTP Bridge Port Roles

- "Root"

The “Root Port” is a forwarding port that can best transmit data from the “Non-Root Bridge” to the “Root Bridge.”

- "Designated"

This is a forwarding port for every LAN segment.

- “Alternate”

This port represents an alternate path to the “Root Bridge.” However, the path is different than for the “Root Port.”

- "Backup"

This port is used as a backup/redundant path to a segment to which another “Bridge Port” is already connected.

- "Disabled"

This is not actually part of STP because a network administrator can manually disable a port.

Wago 852-1505 - - "Disabled" - 1

Note

STP/RSTP

In this document, "STP" refers to both STP and RSTP.

STP Terminology

Root Bridge

The "Root Bridge" is the "base" (root) of the spanning tree.

Path Cost

The path costs are the costs for transmitting a frame through the port in the LAN. This value should be adjusted to the transmission speed.

The valid range is 1 to 200000000. A path with higher costs is more likely to be blocked by STP if a network look is detected.

- "Path Cost Short" is the original size with a 16-bit value.

Only speeds up to 10 Gbit can be considered.

- "Path Cost Long" stands for a 32-bit value.

Speeds up to 10 Tbit are supported.

Table 27: STP Path Costs

Transmission SpeedRecommended ValueRecommended RangePermissible Range
4 Mbit/s250100 ... 10001 ... 65535
10 Mbit/s10050 ... 6001 ... 65535
16 Mbit/s6240 ... 4001 ... 65535
100 Mbit/s1910 ... 601 ... 65535
1 Gbit/s43 ... 101 ... 65535
10 Gbit/s21 ... 51 ... 65535

- Each “Bridge” communicates with the “Root Bridge” via the “Root Port.” The “Root Port” is the port on the switch with the lowest path costs to the “Root Bridge” (the “Root Path Cost”). If there is no “Root Port,” then the switch becomes the “Root Bridge” for the “Spanning Tree” network.

- A “Designated Bridge” is selected for each LAN segment. This bridge has the lowest cost to the “Root Bridge” among the bridges connected to the LAN.

Forward Time (Forward Delay)

The “Forward Time” is the maximum time (in seconds) that the switch waits before it changes states. This delay is required because every switch must first receive information on topology changes before it forwards frames. In addition, each port needs time to receive information on conflicts that would make it return to the blocking state. Otherwise, temporary data loops might result. The valid range is 4 to 30 seconds.

Max Age

The “Max Age” is the maximum time (in seconds) that the switch can wait without receiving a BPDU (“Bridge Protocol Data Unit,” configuration message) before attempting to reconfigure. All switch ports (except for “Designated Ports”) receive BPDUs at regular intervals. Each port that ages out STP information (from the last BPDU) becomes the “Designated Port” for the attached LAN. If it is a “Root Port,” a new “Root Port” is selected from among the switch ports attached to the network.

Hello Time

The “Hello Time” is the time interval in seconds between configuration messages (BDPU “Bridge Protocol Data Unit”) sent from the root switch.

STP

After a bridge determines the lowest cost “Spanning Tree” with STP, it enables the “Root Port” and “Designated Ports” for connected LANs and disables all other ports that participate in STP. Network packets are therefore only forwarded between enabled ports, eliminating any possible network loops.

STP-aware switches exchange BPDUs periodically. If the topology changes in a LAN coupled via bridge, a new tree is spanned. Once a stable network topology has been established, all bridges listen for "Hello BPDUs" transmitted from the "Root Bridge." If a bridge does not get a "Hello BPDU" after a predefined interval ("Max Age"), the bridge assumes that the link to the "Root Bridge" is down. This bridge then initiates negotiations with other bridges to reconfigure the network to re-establish a valid network topology.

Edge Port

"Edge Ports" are attached to a LAN that has no other bridges attached. These ports can transition directly to the "Forwarding" state. RSTP still continues to monitor the port for BPDUs in case a bridge is connected. RSTP can also be configured to automatically detect "Edge Ports." As soon as the bridge detects a BPDU coming to an "Edge Port," the port loses its status as an "Edge Port."

Forward Delay

The “Forward Delay” is the maximum time (in seconds) that the root device waits before changing states (e.g., from “Listening” to “Learning” to “Forwarding”). The valid range is from 4 to 30 seconds.

Transmission Limit

The “Transmission Limit” is used to configure the minimum interval between the transmission of consecutive RSTP BPDUs. This function can only be enabled in RSTP mode. The valid range is from 1 to 10 seconds.

Bridge Priority

“Bridge Priority” is used in selecting the root switch, root port and “Designated Port.” The switch with the highest priority becomes the STA root switch. If all switches have the same priority, however, the switch with the lowest MAC address becomes the root switch.

Port Priority

The port priority is configured in the switch. A low numeric value indicates a high priority. A port with lower priority is more likely to be blocked by STP if a network loop is detected. The valid range is from 0 to 240.

BPDU Guard

This setting is configured separately for each port. If the port is enabled in "BDU Guard" and receives a BPDU, the port is switched to the "Disabled" state to prevent a faulty environment. The user must enable the port manually.

BPDU Filter

This function is used to set up a filter for sending or receiving BPDUs on a switch port. If the port receives BPDUs, the BPDUs are dropped. If both the "BPDU Filter" and the "BPDU Guard" are enabled, the "BPDU Filter" has the higher priority.

Wago 852-1505 - BPDU Filter - 1

Note

BPDU Filter and BPDU Guard

If both the "BPDU Filter" and the "BPDU Guard" are enabled, the "BPDU Filter" has the higher priority.

Root Guard

The “Root Guard” function forces an interface to become a “Designated Port” to prevent neighboring switches from becoming a root switch. This function provides a way to specify the selection of a “Root Bridge” in a network. It prevents a “Designated Port” from becoming the “Root Port.” If a port with the “Root Guard” function receives a superior BPDU, the port moves to a root-inconsistent state (effectively equivalent to the “Listening” state) to maintain the status of the current “Root Bridge.” The port can be moved to the “Forwarding” state if it receives no superior BPDU for the time period of “Hello Times.”

MSTP

The MSTP ("Multiple Spanning Tree Protocol") is an RSTP extension. It allows different spanning tree instances in conjunction with VLANs ("Virtual Local Area Networks").

For a VLAN or group of VLANs, STP instances can be created independently that user their own different spanning trees within a LAN.

With the MSTP approach, a root bridge and the lowest path costs between the root bridge and the root ports offered of the individual bridges are determined.

The root bridge sends Bridge Protocol Data Units (BPDU) to all bridges and determines the network configuration from the configuration data contained in the BPDU data packets.

7.2.14 Xpress Ring

Xpress Ring is a fast-acting, self-healing ring recovery technology that enables networks to recover from link failure within 50 ms.

Fast Link Recovery and Ring Redundancy are important functions for increasing the reliability of nonstop systems.

If the network is planned correctly with an arbiter switch and ring ports, the network can recover from any segment failure within a very short time.

A switch in the Xpress Ring has only two roles: either "Forwarder" or "Arbiter." There can be only one Arbiter switch, while all other switches are "Forwarders."

One of the ring ports of the Arbiter Switch will be set to the blocking state. If one of the ring connections fails, the blocked port is set to the forwarding state.

7.3 Security

7.3.1 IP Source Guard

"IP Source Guard" is a security function that restricts IP traffic on untrusted Layer2 ports by filtering traffic based on a "DHCP Snooping" database connection or a manually configured IP source connection. This function helps prevent access such as "IP Spoofing" (sending IP packets with a spoofed sender IP address) if a host attempts to spoof the IP address of another host. Any IP traffic coming into the interface with a source IP address other than that assigned (via DHCP or static configuration) is filtered out on untrusted Layer2 ports.

This function is used on untrusted Layer2 interfaces in combination with “DHCP Snooping.” An IP source binding table is manually configured (static IP source binding) or created from information from the “DHCP Snooping” function and used. Each entry in this table contains the IP address and associated MAC and VLAN addresses. The “IP Source Guard” only supports Layer2 ports, including “Access Ports” and “Trunk Ports.”

The "IP Source Guard" includes the following functions:

  1. DHCP Snooping
  2. DHCP Binding Table
  3. ARP Inspection
  4. Blacklist Filter (ARP inspection with MAC address filter table)

“DHCP Snooping” is a DHCP security function that increases network security by filtering untrusted DHCP messages and creating and using a “DHCP Snooping” database connection (also called “DHCP Snooping” binding table).

“DHCP Snooping” acts like a firewall between untrusted hosts and DHCP servers. It can be used to differentiate between untrusted interfaces connected to end users and trusted interfaces connected to a DHCP server or another switch.

The “DHCP Snooping” binding table contains the MAC address, IP address, “Lease Time,” mount type, VLAN number and information on the local untrusted interfaces of a switch.

If a switch receives a packet from an untrusted interface and the interface belongs to a VLAN in which “DHCP Snooping” is enabled, the switch compares the MAC source address to the hardware address of the DHCP client. If the addresses match (as is normal), the switch forwards the packet. If the addresses do not match, the switch drops the packet.

The switch drops a DHCP packet when one of the following situations occur:

  • A packet from a DHCP server, such as a DHCPOFFER, DHCPACK, DHCPNAK or DHCPLEASEQUERY packet, is received from the untrusted port.
  • A packet is received on an untrusted interface, and the source MAC address and the DHCP client hardware address do not match any of the current bindings.

“DHCP Snooping” can be used to filter unauthorized DHCP packets on the network and to dynamically create a binding table. This can prevent clients from getting IP addresses from unauthorized DHCP servers.

Trusted vs. Untrusted Ports

Every port is either a “Trusted Port” or an “Untrusted Port” for “DHCP Snooping.” This setting is independent of the “Trusted/Untrusted” setting for ARP inspection. You can also specify the maximum number for DHCP packets that each port (“trusted” or “untrusted”) can receive each second.

"Trusted Ports" are connected to DHCP servers or switches. The switch only drops DHCP packets from "Trusted Ports" if the transmission rate of the DHCP packets received is too high. The switch learns the dynamic bindings from the "Trusted Ports."

Wago 852-1505 - Trusted vs. Untrusted Ports - 1

Note

DHCP Requests

The switch drops all DHCP requests when “DHCP Snooping” is enabled and there are no “Trusted Ports.”

"Untrusted Ports" are connected to subscribers. The switch discards DHCP packets from untrusted ports in the following situations:

• The packet is a DHCP server packet (e.g., "OFFER," "ACK" or "NACK").
- The source MAC address and source IP address in a packet do not match any of the current bindings.
- The packet is a RELEASE or DECLINE packet, and the source MAC address and source port do not match any of the current bindings.
• The transmission rate of the DHCP packets received is too high.

DHCP Snooping Database

The switch stores the binding table in volatile memory. If the switch restarts, it loads the static bindings from non-volatile memory but loses the dynamic bindings, so the devices in the network have to send DHCP requests again.

Configuring DHCP Snooping

Follow the steps below to configure "DHCP Snooping" on the switch:

  1. Enable "DHCP Snooping" on the switch.
  2. Enable "DHCP Snooping" for each VLAN.
  3. Configure "Trusted Ports" and "Untrusted Ports."
  4. Configure the static bindings.

Note

Wago 852-1505 - Note - 1

DHCP Snooping

The switch drops all DHCP requests when “DHCP Snooping” is enabled and there are no “Trusted Ports.”

If the port link fails, the entries from this port are deleted from the "DHCP Snooping" binding table.

You must first enable global "DHCP Snooping" and "DHCP Snooping" for VLANs.

The main purposes of the "DHCP Snooping" are:

1 To create and maintain a binding table for the ARP Inspection function.
2 To filter packets from DHCP servers that are connected to an "Untrusted Port."

Wago 852-1505 - DHCP Snooping - 1

flowchart
graph LR
    subgraph DHCP Client
        A["Computer"] -->|Untrust| B["Server-1"]
        C["DHCP Server-1"] -->|Untrust| D["Server-2"]
        E["Untrust"] --> F["Client"]
    end
    subgraph DHCP Snooping
        G["1"] --> H["2"]
        I["3"] --> J["4"]
        K["5"] --> L["6"]
        M["7"] --> N["8"]
        O["9"] --> P["10"]
        Q["11"] --> R["12"]
        S["13"] --> T["14"]
        U["15"] --> V["16"]
        W["17"] --> X["18"]
        Y["19"] --> Z["20"]
        AA["21"] --> AB["22"]
        AC["23"] --> AD["24"]
        AE["trust"] --> AF["25"]
    end

Figure 24: DHCP Snooping

The packets from DHCP servers connected to an "Untrusted Port" are filtered.

7.3.1.1.1 Server Screening

The switch supports "Server Screening," a function that denies access to "Rogue DHCP Servers" (unauthorized, invalid DHCP servers). That is, when one or more DHCP servers are present on the network and both provide DHCP services to different distinct groups of clients, the valid DHCP server's packets are passed to the client.

If this function is enabled, the "DHCP Snooping" function must also be enabled beforehand. The switch allows users to configure up to three valid DHCP servers.

If no DHCP servers are configured, it means all DHCP servers are valid.

7.3.1.2 Binding Table

The “DHCP Snooping” binding table records the host information learned from “DHCP Snooping” (dynamic) or set by user (static). The ARP inspection uses this table to decide whether to forward or drop ARP packets. ARP packets sent from invalid hosts are dropped. After the “Lease Time” expires, the entry is deleted from the table.

Static bindings are uniquely identified by the MAC address and VLAN ID. Each MAC address and VLAN ID can only be in one static binding. If you create a static binding with the MAC address and VLAN ID of an existing binding, the new static binding replaces the original one.

Bindings are used by "DHCP Snooping" and ARP inspection to distinguish between authorized and unauthorized packets in the network. The switch detects the dynamic bindings by "snooping" DHCP packets and through static information from the manual entries in the "Static Entry Settings" menu.

Dynamic “ARP Inspection” (“Address Resolution Protocol Inspection”) is a security function in which ARP packets are inspected in a network. Dynamic ARP inspection validates the packet by comparing IP-to-MAC address bindings to entries stored in a trusted database (the “DHCP Snooping” database) before forwarding the packet. Dynamic ARP intercepts, logs and discards ARP packets with invalid IP-to-MAC address bindings. This function protects the network from certain “man-in-the-middle” attacks.

Dynamic ARP inspection ensures that only valid ARP requests and responses are relayed.

The switch executes the following processes:

• Interception of all ARP requests and responses on untrusted ports.
• Inspection of all intercepted packets for valid IP-to-MAC address binding before updating the local ARP cache or forwarding a packet to the respective destination.

Trusted Port and Untrusted Port

  • This setting is independent of the “Trusted/Untrusted” setting for “DHCP Snooping.”
    • The switch does not drop ARP packets from "Trusted Ports" for any reason.
  • The switch drops ARP packets from “Untrusted Ports” if the information from the sender in the ARP packets does not match any current bindings.
  • Normally, the “Trusted Ports” are the “Uplink Ports,” and the “Untrusted Ports” are connected to subscribers.

Configurations

Users can enable/disable ARP Inspection on the switch. It can also be enabled/disabled on a specific VLAN. If ARP Inspection is disabled on the switch, ARP Inspection is disabled on all VLANs, even if enabled for individual VLANs.

Wago 852-1505 - Configurations - 1

Note

Global State/VLAN State

There are a global state and individual VLAN states.

If the global state is disabled, ARP Inspection is disabled on the switch, even if individual VLAN states are enabled.

If the global state for ARP Inspection is enabled, this function must be enabled by the user for specific VLANs

Dynamic ARP inspection validates the packet by comparing IP-to-MAC address bindings to entries stored in a trusted database (the "DHCP Snooping" database) before forwarding the packet. If the switch detects an unauthorized ARP packet, it automatically creates a MAC address filter to block traffic from the source MAC address and the source VLAN ID of the packet. In addition, the switch regularly deletes entries whose "Age Time" has expired.

• If ARP Inspection is enabled and the system detects invalid hosts, the system creates a filter entry in the MAC address table.
- If a port link fails when ARP Inspection is disabled, the switch will remove the MAC filter entries for this this port.
• If a port link fails when ARP Inspection is enabled, the switch will remove the MAC filter entries for this port.
• The maximum number of entries in the MAC address filter table is 256.
- If the MAC address filter table for ARP inspection is full and the switch receives an unauthorized ARP packet, it automatically creates a "SYSLOG" and the ARP packet is dropped. The SYSLOG is created only once.

7.3.2 Access Control List – ACL

The ACL (“Access Control List”) is a list of permissions attached to an object. The list specifies who or what is allowed to access an object and what operations are allowed to be performed on the object.

The ACL function allows users to configure a few rules to reject packets from the specific ingress ports or all ports. These rules check the source and destination MAC addresses of packets. If packets match these rules, the system executes the “deny” action, meaning it rejects these packets.

The “Action Resolution Engine” collects the information (action and metering results) from the hit entries: If more than one rule matches, the actions and measurements/counters are taken from the policy associated with the matched rule with highest priority.

7.3.3 IEEE 802.1X Communication Standard

IEEE 802.1X is an IEEE standard for port-based Network Access Control ("port" meaning a single point of attachment to the LAN infrastructure). It is part of the IEEE 802.1 group of networking protocols. It provides an authentication mechanism for devices wishing to attach to a LAN, either establishing a point-to-point connection or preventing it if authentication fails. It is used for most wireless 802.11 access points and is based on EAP ("Extensible Authentication Protocol").

IEEE 802.1X provides port-based authentication, which involves communications between a so-called supplicant, authenticator and authentication server. The supplicant is often software on a client device, such as a laptop, the authenticator is a wired ETHERNET switch or wireless access point, and the authentication server is generally a RADIUS ("Remote Authentication Dial-In User Service") database.

The authenticator acts like a security guard for the protected network. The supplicant (e.g., client device) is not allowed access the protected side of the network through the authenticator until the supplicant's identity is authenticated. With 802.1X port-based authentication, the supplicant provides credentials, such as a user name/password or digital certificate, to the authenticator, and the authenticator forwards the credentials to the authentication server for verification. If the credentials are valid (in the authentication server database), the supplicant (client device) is allowed to access resources located on the protected side of the network.

Upon detection of a new client (“supplicant”), the port on the switch (“authenticator”) is enabled and set to the “unauthorized” state. In this state, only 802.1X traffic is allowed; other traffic, such as DHCP and HTTP, is blocked on the network layer (Layer 3). The authenticator sends out the EAP identity request to the supplicant, the supplicant responds with the EAP response packet, which the authenticator forwards to the authenticating server. If the authenticating server accepts the request, the authenticator sets the port to the “authorized” mode, and normal traffic is allowed. If the supplicant logs off, it sends an EAP logoff message to the authenticator. The authenticator then sets the port to the “unauthorized” state, once again blocking all non-EAP traffic.

RADIUS Server

The RADIUS server ("Remote Authentication Dial-In User Service") is a client/server-based security protocol for authentication and control of network access permissions.

The RADIUS server operates using the Challenge/Response process and supports central administration of user data, such as user ID, passwords, phone numbers, access rights and account data, and consists of an accounting and authentication protocol.

In combination with DHCP and PPP, configuration of dial-in systems can occur automatically with RADIUS.

Wago 852-1505 - RADIUS Server - 1

flowchart
graph TD
    A["Wireless Network"] --> B["Authentication Server (RADIUS)"]
    B --> C["AS"]
    C --> D["AP"]
    D --> E["Authenticator"]
    E --> F["Supplicant"]
    F --> G["Internet or other LAN resources"]
    style A fill:#f9f,stroke:#333
    style B fill:#bbf,stroke:#333
    style C fill:#bfb,stroke:#333
    style D fill:#ffb,stroke:#333
    style E fill:#cfc,stroke:#333
    style F fill:#fcc,stroke:#333
    style G fill:#cff,stroke:#333

Figure 25: IEEE 802.1X

The following figure illustrates how a client connecting to an IEEE 802.1X-authentication-enabled port goes through the validation process. The switch prompts the client for login information in the form of a user name and password.

Once the client provides the login credentials, the switch sends an authentication request to the RADIUS server. The RADIUS server checks whether this client is allowed access to the port.

Wago 852-1505 - RADIUS Server - 2

flowchart
graph TD
    A["Server"] --> B["Server"]
    B --> C["Server"]
    C --> D["Session Granted/Denied"]
    D --> E["Login Credentials"]
    E --> F["Login Info Request"]
    F --> G["New Connection"]
    G --> H["Authentication Request"]
    H --> I["Authentication Reply"]

Figure 26: RADIUS Server

Local User Accounts

By storing user profiles locally on the switch, the switch can authenticate users without interacting with the network authentication server. However, there is a limit to six users that can be authenticated in this way.

Guest VLAN

The Guest VLAN function in IEEE 802.1X port-based authentication on the switch provides limited services to clients, such as downloading the IEEE 802.1X client. These clients can update their system for IEEE 802.1X authentication.

If you enable a guest VLAN on an IEEE 802.1X port, the switch assigns clients to a guest VLAN when the switch does not receive a response to its EAP request/identity frame or when EAPOL ("EAP over LAN") packets are not sent by the client.

Port Parameters

- Admin Control Direction

Both - If 802.1X port authentication for a user has failed, incoming and outgoing packets on the port are dropped. Incoming - If 802.1X port authentication for a user has failed, only incoming packets on the port are dropped.

- Re-Authentication

This function specifies whether a subscriber must periodically re-enter his or her user name and password to stay connected to the port.

- Reauth Period

The “Reauth Period” function is used to specify how often a client has to re-enter his or her username and password to stay connected to the port. The permissible range for this field is 0 to 65535 seconds.

- Port Control Mode

"Auto" Users can access the network after authentication. "Force-authorized" Users can access the network without authentication. "force-unauthorized" Users cannot access the network.

- Quiet Period

The “Quiet Period” function is used to specify the time a client has to wait before the next authentication attempt. This prevents the switch from becoming overloaded with continuous authentication attempts from the client. The permissible range for this field is 0 to 65535 seconds.

- Server Timeout

The “Server Timeout” value is used for timing out the authentication server.

- Supp Timeout

The “Supp Timeout” value is the initialization value used for timing out a supplicant.

- Max Req Time

The “Max Req Time” specifies how often the switch attempts to connect to the authentication server before determining that the server is down. The permissible range for this field is 1 to 10 attempts.

7.3.4 Port Security

The switch receives the MAC address of a device that is connected to a specific port direction and allows data forwarding. The functions of the switch allow control over which and how many devices may be connected to a switch port.

The “Port Security” functions can specify the maximum number of MAC addresses per interface. If this number is exceeded, incoming packets with new MAC addresses are dropped. A MAC address table can be used to check this. The static MAC addresses are included for this limit.

Wago 852-1505 - Port Security - 1

Note

State Change of a Port on the Switch

If the state of a port on the switch is changed from disabled to enabled, all MAC addresses captured by this port are dropped.

7.4 Monitor

7.4.1 Alarm

This function alerts the network administrator to any abnormal network situations.

Wago 852-1505 - Alarm - 1

Note

Alarm DIP Switches

The alarm DIP switches allow users to configure whether an alarm message should be sent when a corresponding event occurs.

Example

P1: ON (AN) – The switch sends an alarm message if the connection on Port 1 fails.

PWR: ON – The switch sends an alarm message if the primary power supply is interrupted.

RPS: ON – The switch sends an alarm message if the redundant power supply is interrupted.

7.4.2 Monitor Information

This function displays some hardware information for purposes of monitoring the system and guaranteeing proper network operation.

7.4.3 RMON Statistics

This function is used to monitor or delete RMON statistics.

Jabber

Subscribers whose data packets are longer than the allowable MTU ("Maximum Transmission Unit") on a network (e.g., ETHERNET) are referred to as Jabbers.

7.4.4 SFP

SFPs ("Small Form-factor Pluggables") are small standardized modules for network connections.

SFP refers to a modular interface to support various transmission media and is used in network technology for interface flexibilityt

7.4.4.1 DDMI

DDMI ("Digital Diagnostics Monitoring Interface") is technology that allows users to monitor the following real-time parameters in SFP modules:

  • Voltage
  • Bias current
  • Input power
  • Output power
  • Temperature)

7.4.5 Traffic Monitor

The “Traffic Monitor” function can be used to enable or disable a specific port or the switch globally. This function can monitor the data rate of broadcast, multicast or broadcast and multicast packets. If the packet rate exceeds the specification for a user, the port is blocked. If the “Recovery” function is enabled, the port is re-enabled after the “Recovery Time” has expired.

7.5 Management

7.5.1 SNMP

SNMP (“Simple Network Management Protocol”) is used in network management systems to monitor the state of attached devices that require the attention of an administrator. SNMP is a component of the “Internet Protocol Suite” defined by the IETF (“Internet Engineering Task Force”). It consists of a set of standards for network management, including an application layer protocol, a database schema and a set of data objects.

SNMP provides management data in the form of variables of the managed systems, which describe the system configuration. These variables can then be queried (and sometimes changed) by managing applications.

Support for MIBs

  • RFC 1157 A Simple Network Management Protocol
  • RFC 1213 MIB-II
  • RFC 1493 Bridge MIB
  • RFC 1643 ETHERNET Interface MIB
  • RFC 1757 RMON Group 1,2,3,9

An “SNMP Community String” is a text string that acts as a password. It is used to authenticate messages that are sent between the management station (the SNMP manager) and the device (the SNMP agent). The string is included in every packet transmitted between the SNMP manager and the SNMP agent.

The “SNMP Community” acts like a password and is used to define the security parameters of SNMP clients in SNMP v1 and SNMP v2c environments. The default “SNMP Community” is “public” for both SNMPv1 and SNMPv2c before SNMPv3 is enabled. Once SNMPv3 is enabled, the “Communities” of SNMPv1 and v2c have to be unique and cannot be shared.

Network ID of "Trusted Host":

The IP address is a combination of the network ID and host ID.

• Network ID = (host IP and mask).
- A user must enter the network ID only and leave the host ID at "0." If a user enters a host ID, such as 192.168.1.102, the system resets the host ID to 192.168.1.0.

Wago 852-1505 - Support for MIBs - 1

Note

Community String

It should allow users to configure the "Community String" and rights only.

If a user configures the "Community String" and the rights and the network ID of the "Trusted Host" = 0.0.0.0, subnet mask = 0.0.0.0, this means that all hosts with this "Community String" can access the switch.

7.5.1.1 SNMP Trap

A trap is an unsolicited message from an agent to the manager that an event has occurred. The SNMP Manager that receives the trap can ask for more information.

7.5.2 Auto Provision

The “Auto Provision” is a service that service providers can use to quickly, easily and automatically configure remote devices or update firmware from a remote location.

  1. If the function is enabled, the switch first downloads an information file from the server of the service provider.

The file name is formed according to the following naming convention: Series_Model_Autoprovision.txt

Example: 852_1505_Autoprovision.txt

The contents of the file are:
AUTO_PROVISION_VER=1
Firmware_Upgrade_State=1
Firmware_Version=5228-000-1.0.0.b1
Firmware_Image_File=5228-000-1.0.0.b1.fw
Firmware_Reboot=1
Global_Configuration_State=0
Global_Configuration_File=5228-000-1.0.0.b1.save
Global_Configuration_Reboot=0
Specific_Configuration_State=0
Specific_Configuration_Reboot=0 
  1. If the "AUTO_PROVISION_VER" value is higher than the current version of the "Auto Provision," continue to Step 3. If not, please wait 24 hours and start again with Step 1.

  2. If "Firmware_Upgrade_State = 1," continue to Step 4. If not, continue to Step 6.

  3. If the "Firmware_Version" differs from the current firmware version, please download the "Firmware_Image_File" and update the firmware.

  4. If the firmware is updated successfully and "Firmware_Reboot=1," "reboot_flag=1" is executed.

  5. If "Global_Configuration_State = 1," please download the "Global_Configuration_File" and update the configuration. If not, continue to Step 8.

  6. If the configuration is updated successfully and "Global_Configuration_Reboot = 1," "reboot_flag=1" is executed.

  7. If "Global_Configuration_State =1," please download the specific configuration file and update the configuration. If not, continue to Step 10. The name is: "Series_Model_" with 12-bit MAC digits, e.g., "852_1505_00e04c8196b9.txt."

  8. If the configuration is updated successfully and "Specific_Configuration_Reboot = 1," "reboot_flag = 1" is executed.
  9. If "reboot_flag=1," save the executed configuration and reboot the switch. If not, please wait 24 hours and start again at Step 1.

7.5.3 Mail Alarm

The “Mail Alarm” function sends an e-mail trap to a previously defined administrator when certain events occur. The events are listed below:

System Reboot: The system performs a warm or cold start.

Port Link Change: A port link is established or fails.

Configuration Change: The system configurations in the NV-RAM have been updated.

Firmware Upgrade: The system firmware has been updated.

User Login: A user has logged into the system.

Port Blocked: A port is blocked by "Loop Detection" or "BPDU Guard."

8 Configuration

8.1 Overview of Configuration Options

The industrial managed switch provides two options for advanced management features:

Telnet/SSH Port

A menu-driven user interface can be called up from the WBM ("Web Based Management") via the Telnet port.

Wago 852-1505 - Telnet/SSH Port - 1

Note

Additional Information

Please refer to the section "Configuring in the Web-Based Management System (WBM)" for a detailed description.

Console Port

The CLI ("Command Line Interface") can be called up from the Console port on the front of the industrial managed switch (local) via an integrated management agent.

The management agent is based on SNMP (Simple Network Management Protocol). Using this SNMP agent, management software can be used to manage the industrial managed switch from any PC in the network.

The management agent includes an embedded HTTP Web agent. A standard Web browser can be used on any PC connected to the network to access the Web agent.

Wago 852-1505 - Console Port - 1

Note

Additional Information

Please refer to the section "Appendix" > ... > "Configuring in the Command Line Interface (CLI)" for a detailed description.

8.1.1 Telnet Port

  1. Connect the computer to one of the ETHERNET ports.
  2. Open a Telnet session to the switch's IP address. If this is your first login, use the default values.

Table 28: Default Settings for the Telnet Port

SettingDefault Value
FW Version 01FW Version 02 or higher
IP Address192.168.1.254
Subnet Mask255.255.255.0
Default Gateway0.0.0.0
Management VLAN1
Default Usernameadminadmin
Default PasswordWago1951wago
  1. Make sure your computer IP address is in the same subnet, unless you are accessing the switch through one or more routers.

8.2 Console Port

Before accessing the integrated management agent of the industrial managed switch via a network connection, you first have to configure it via a local connection or the BOOTP protocol with the default IP address, a subnet mask and a standard gateway.

After configuring the IP parameters of the industrial managed switch, you can access the integrated configuration utility from any point in the connected network or via the Internet. The integrated configuration utility can be called up via Telnet from any computer connected to the network. In addition, it can be managed from any computer via a Web browser.

  1. Connect the computer to the console port on the switch using the appropriate cable.

  2. Use Telnet with the following settings:

Table 29: Default Settings for the Console Port

SettingDefault Value
Baud Rate38400
ParityNone
Number of Data Bits8
Number of Stop Bits1
Flow ControlNone
  1. Press [ENTER] to open the login screen.

Table 30: Login Screen

SettingDefault Value
FW Version 01FW Version 02 or higher
Default Usernameadminadmin
Default PasswordWago1951wago

Wago 852-1505 - Console Port - 1

Note

Requirement to establish the connection

Make sure that the terminal or PC is configured for the connection with the above settings. Otherwise, no connection can be established.

Please refer to the section "Appendix" > ... > "RJ-45 Cable" for details on the cable terminal assignment.

9 Configuration in the WBM

An internal file system and integrated Webserver can be used for configuration and administration of the system. Together, they are referred to as the Web-Based Management (WBM) system.

The HTML pages saved internally provide you with information about the configuration and status of the fieldbus node. In addition, you can also change the configuration of the device here.

You can also save HTML pages you created yourself via the implemented file system.

Wago 852-1505 - Configuration in the WBM - 1

Note

Always restart after making changes to the configuration!

The system must always be restarted for the changed configuration settings to take effect.

  1. To open the WBM, launch a Web browser (e.g., Microsoft Internet Explorer or Mozilla Firefox).
  2. Enter the IP address of the fieldbus coupler/controller.
  3. Click [Enter] to confirm.
  4. Enter your user name and password in the query dialog:
User = "admin"
Password = "wago" 
  1. The start page of WBM loads.
  2. Make the desired settings.

  3. Click [Apply] or [Update] to confirm your changes, or click [Delete] or [Discard] to discard your changes.

  4. To apply the settings, confirm your changes with the [Save configuration] button.

You can access the corresponding WBM pages via the links in the navigation bar:

Table 31: Overview – Navigation Links and WBM Pages

Navigation Links and WBM Pages
▶ [System Status]
• System Information
▶ [Basic Settings]
• General Settings• MAC Management• Port Mirroring• Port Settings

[Advanced Settings]

[Bandwidth Settings]

• QoS
- Rate Limitation

[IMGP Snooping]

  • IGMP Snooping
  • IGMP Filter
    • MVR
    • Static Multicast Addresses
    • Multicast Statistics

[VLAN]

  • Port Isolation
  • VLAN
    • GVRP
  • IP Subnet VLAN
  • MAC VLAN
  • Protocol VLAN
    • Q-in-Q

  • DHCP Relay

  • DHCP Options
  • Dual Homing
  • Dual Ring
  • ERPS
  • Link Aggregation
  • LLDP
  • Loop Detection
  • Jet Ring
  • MODBUS
  • PoE
    • STP
  • Xpress Ring

[Security]

[IP Source Guard] ▶

  • DHCP Snooping
  • Binding Table
  • ARP Inspection

  • Access Control List

  • IEEE 802.1X
  • Port Security

[Monitor]

  • Alarm
  • System Information
  • Port Statistics
  • Port Utilization
  • RMON Statistics
  • SFP Information
  • Traffic Monitor

[Management]

[SNMP] ▶

  • SNMP
  • SNMP Trap
  • SNMPv3

  • Auto Provision

  • Mail Alarm
  • Maintenance
  • System Log
  • User Account
  • Open Source License
  • Wago Licenses

The settings/configuration of the industrial managed switch can be made on these WBM pages.

There are tab pages on some WBM pages for the settings/configurations.

The default values are displayed in bold.

9.1 System Status

9.1.1 System Information

System Information System Information Model Name 852-0303 Host Name L2SWITCH Boot Code Version 852-0303-091-1.0.8.S0 Firmware Version 852-0303-058-1.1.7.S0 Built Date Wed Nov 4 14:38:44 CST 2015 DHCP Client Disabled IP Address 192.168.1.254 Subnet Mask 255.255.255.0 Default Gateway 0.0.0.0 MAC Address 00:30.de:ff:dd:16 Serial Number 000155002165 Management VLAN 1 CPU Loading 6 % Memory Information Total: 53956 KB, Free: 28104 KB, Usage: 47.91 % Current Time 2014-1-1, 7:7:54 DHCPv6 Client Disabled IPv6 Link Local fe80:0000:0000:0000 0230 deff feff dd16/64 IPv6 Global Refresh

Figure 27: WBM "System Information" Page

Table 32: WBM "System Information" Page

ParameterDescription
Model NameThis display field shows the model name of the switch.
Host NameThis display field shows the host name of the switch.
Boot Code VersionThis display field shows the boot code version.
Firmware VersionThis display field shows the version number of the firmware currently installed.
Created onThis display field shows the create date of the firmware currently installed.
DHCP ClientThis display field indicates whether the DHCP client function is enabled.
IP AddressThis display field shows the IP address of the switch.
Subnet MaskThis display field shows the subnet mask of the switch.
Default GatewayThis display field shows the default gateway of the switch.
MAC AddressThis display field shows the MAC (Media Access Control) address of the switch.
Serial NumberThis display field shows the serial number.
Management VLANThis display field shows the VLAN ID required for the switch management process.
CPU LoadThis display field shows the system load of the switch as a percentage.
Memory UsageThis display field shows the switch's total memory ("Total"), memory available at the moment ("Free") and used memory ("Usage").
Current TimeThis display field shows the current date (yyyy-mm-dd) and current time (hh:mm:ss).
DHCPv6 ClientThis display field indicates whether the DHCPv6 client is on or off.
Local IPv6 AddressThis field displays the local IPv6 address.
IPv6 Default GatewayThis display field shows the default gateway of the switch.
Global IPv6 AddressThis display field indicates whether the global IPv6 address has also been entered.
UpdateClick this button to update the information on this page.

9.2 Basic Settings

9.2.1 General Settings

9.2.1.1 System

General Settings System Jumbo Frame SNTP Management Host System Settings Hostname L2SWITCH Management VLAN 1 IPv4 Settings DHCP Client Disable ▼ Renew IP Address 192.168.1.254 Subnet Mask 255.255.255.0 Default Gateway 0.0.0.0 IPv6 Settings DHCPv6 Client Disable ▼ Renew IPv6 Address / Default Gateway Apply Refresh

Figure 28: WBM Page, "General Settings" – "System" Tab

Table 33: WBM Page, "General Settings" – "System" Tab

System Settings
ParametersDefaultDescription
HostnameL2SWITCHEnter up to 64 alphanumeric characters for the name of your switch.The hostname should be a combination of numbers, letters, hyphens (-) or underscores (_).
Management VLAN1Specify a VLAN group to have access to the switch. Valid VLAN range: 1 ... 4094.
NoteWago 852-1505 - System - 2NoteConfiguring a Management VLANBefore configuring a management VLAN, you must first create a management VLAN and assign it at least one subscriber port.

Table 33: WBM Page, "General Settings" – "System" Tab

IPv6 Settings
ParametersDefaultDescription
DHCP ClientDisableSelect “Disable” in the selection box if you want to manually configure the IP address of the switch.Click [Renew] to allow the switch to get an IP address from the DHCP server.
EnableSelect “Enable” in the selection box to allow the switch to get its IP address from a DHCP server automatically.Click [Renew] to allow the switch to get an IP address from the DHCP server.
IP Address192.168.0.254Enter the IP address of the switch in decimal-point notation.
Subnet Mask255.255.255.0Enter the IP subnet mask of the switch in decimal-point notation.
Default Gateway0.0.0.0Enter the IP address of the default outgoing gateway in decimal-point notation.
IPv6 Settings
ParametersDefaultDescription
DHCPv6 ClientDisableSelect “Disable” in the selection box if you want to manually configure the IP address of the switch.
EnableSelect “Enable” in the selection box to allow the switch to get its IP address by DHCP automatically.Click [Renew] for the switch to update the values.
Static IPv6 AddressThis field displays the static IPv6 address.
Default GatewayEnter the IP address of the default outgoing gateway in decimal-point notation.

9.2.1.2 Jumbo Frame

Wago 852-1505 - Jumbo Frame - 1

Note

Additional Information

Please refer to the section "Function Description" for more information on "Jumbo Frame".

General Settings System Jumbo Frame SNTP Management Host Jumbo Frame Setting Port Jumbo Frame From: 1 to: 1 10240 Apply Refresh Port Jumbo Frame Port Jumbo Frame 1 10240 2 10240 3 10240 4 10240 5 10240 6 10240 7 10240 8 10240 9 10240 10 10240

Figure 29: WBM Page, "General" – "Jumbo Frame" Tab

Table 34: WBM Page, "General" – "Jumbo Frame" Tab

Jumbo Frame Settings
ParametersDefaultDescription
PortFrom:1Select a port or port range in the selection box to configure the jumbo frame.
to:1Select a port or port range in the selection box to configure the jumbo frame.
Jumbo Frame10240Select the maximum number of bytes of a jumbo frame for all ports. The bigger the frame size, the better the network performance.
1522
1536
1552
9010
9216
Port1 ... 10This column displays the port numbers.
Jumbo Frame1522This column displays the maximum number of bytes for a jumbo frame.
1536
1552
9010
9216
10240

9.2.1.3 SNTP

Wago 852-1505 - SNTP - 1

Note

Additional Information

Please refer to the section "Function Description" for more information on "SNTP" (Simple Network Time Protocol).

General Settings System Jumbo Frame SNTP Management Host Current Time and Date Current Time 03:59:58 (UTC) Current Date 2014-01-01 Time and Date Settings ● Manual New Time 2014 1 1 / 3 : 59 : 58 (yyyy.mm.dd / hh:mm:ss) ○ Enable Network Time Protocol NTP Server ● 192.5:41.41 - North America ○ Time Zone +0000 Daylight Saving Settings State Disable Start Date First Sunday of January at 0 o'clock End Date First Sunday of January at 0 o'clock Apply Refresh

Figure 30: WBM Page, "General" – "SNTP" Tab

Table 35: WBM Page, "General" – "SNTP" Tab

Current Time and Date
ParametersDefaultDescription
Current TimeThis field displays the current time if you open or refresh the menu.
Current DateThe field displays the current date if you open or refresh the menu.
Time and Date Settings
ParametersDefaultDescription
ManualNew Time ○Select this option if you want to manually set the time and date for the system.Enter the new date in the format year/month/day format and time in the format hour/minute/second.Click [Apply] to display the “Current Time” and “Current Date”.
Enable Network Time ProtocolSelect this option to use NTP (“Network Time Protocol”) for the time service.
NTP Server ⊙0.0.0.0Select this option if you want to use a predefined time server.The switch searches for a time server for 60 seconds.
Select this option if you enter the IP address of a time server.The switch searches for a time server for 60 seconds.
IPEnter the IP address of the NTP server in decimal-point notation.
Domain NameEnter the domain address of the switch.
Time Zone+0000Enter the time difference between UTC (“Universal Time Coordinated”, formally GMT “Greenwich Mean Time”) and the time zone in hh.mm.

Table 35: WBM Page, "General" – "SNTP" Tab

Daylight Saving Settings
ParametersDefaultDescription
StateDisableSelect “Disable” if you do not want to use daylight savings time.
EnableSelect “Enable” if you want to use daylight savings time.
Start Date ^1) Enter the date and time for the start of daylight savings if you have enabled this option. The time is displayed in 24-hour format.
End Date ^2) Enter the date and time for the end of daylight savings if you have enabled this option. The time is displayed in 24-hour format.
1)Daylight savings starts on the second Sunday of March in most places in the USA.Daylight savings starts at 2 A.M local time in each time zone in the USA.Correspondingly, you would select “Second, Sunday, March” and “2:00”.In the EU, daylight savings starts on the last Sunday in March.It starts at the same time (1:00 A.M GMT or UTC) in all EU time zones. Correspondingly, you would select “Last, Sunday, March”) and in the last field, enter the time based on your time zone.In Germany, for instance, you would select “2:00” because Germany's time zone is one hour ahead of GMT or UTC (GMT+1).
2)In the USA, daylight savings ends on the last Sunday in October.It ends at 2:00 A.M. local time in each time zone in the USA.Correspondingly, you would select “First, Sunday, November” and “2:00”.In the EU, daylight savings ends on the last Sunday in October.Daylight savings ends at the same time (1:00 AM GMT or UTC) in all EU times zones.Correspondingly, you would select “Last, Sunday, October”) and in the last field, enter the time based on your time zone. In Germany, for instance, you would select “2:00” because Germany's time zone is one hour ahead of GMT or UTC (GMT+1).

9.2.1.4 Management Host

Wago 852-1505 - Management Host - 1

Note

Additional Information

Please refer to the section "Function Description" for more information on "Management Host".

General Settings System.Jumbo Frame.SNTP.Management Host Management Host Settings Management Host Apply.Refresh Management Host List No.Management Host.Action

Figure 31: WBM Page, "General" – "Management Host" Tab

Table 36: WBM Page, "General" – "Management Host" Tab

Management Host Settings
ParametersDefaultDescription
Management HostEnter the IP address of the “Management Host” in decimal-point notation.
Management Host List
ParametersDefaultDescription
No.1 ... 3This column displays the sequential numbers of each “Management Host”.
Management HostThis column displays the “Management Hosts”.
ActionClick [Delete] to delete a specific entry.

9.2.2 MAC Management

Wago 852-1505 - MAC Management - 1

Note

Additional Information

Please refer to the section "Function Description" for more information on "MAC Management".

9.2.2.1 Static MAC Settings

Wago 852-1505 - Static MAC Settings - 1

Note

Additional Information

Please refer to the section "Function Description" for more information on "Static MAC Settings" (static MAC address).

MAC Management Static MAC Settings MAC Table Age Time Setting Refusal MAC Settings Static MAC Settings MAC Address VLAN ID Port 1 Apply Refresh Static MAC Table MAC Address VLAN ID Port Action 00:30:de:ff:dd:16 1 CPU Total counts : 1

Figure 32: WBM Page, "MAC Management" – "Static MAC Settings" Tab

Table 37: WBM Page, "MAC Management" – "Static MAC Settings" Tab

Static MAC Settings
ParametersDefaultDescription
MAC AddressIn this input field, enter the MAC address of a computer or device that you want to add to the MAC address table.The valid format is: hh:hh:hh:hh:hh:hh.
VLAN IDIn this input field, enter the VLAN ID to apply to the computer or device.
Port1 ... 10In this selection box, select the port number to which the computer or device is connected.

Table 37: WBM Page, "MAC Management" – "Static MAC Settings" Tab

Static MAC Table
ParametersDefaultDescription
MAC AddressThis column displays the manually entered MAC address entries.
VLAN IDThis column displays the VLAN ID of the manually entered MAC address entries.
Port1 ... 10This column displays the port numbers of the manually entered MAC address entries.The MAC address “CPU” is the MAC address of the switch.
ActionClick [Delete] to delete the manually entered MAC address from the MAC address table.You cannot delete the MAC address of the switch from the static MAC address table.
Total countsThis display field displays the total number of entries in the static MAC address table.

9.2.2.2 MAC Table

MAC Management Static MAC Settings MAC Table Age Time Setting Refusal MAC Settings MAC Table Show Type All Apply Refresh Clear MAC Address Wayte VLAN ID Port/Trunk ID 00:30:de:ff:dd:16 Static 1 CPU Total counts : 1 Page UP Page Down Page:1/1 Page:1 Apply

Figure 33: WBM Page, "MAC Management" – "MAC Table" Tab

Table 38: WBM Page, "MAC Management" – "MAC Table" Tab

MAC Table
ParametersDefaultDescription
Show Type[All]Select “All” to display all MAC address entries.
StaticSelect “Static” to display the static MAC address entries.
DynamicSelect “Dynamic” to display the dynamic MAC address entries.
PortSelect “Port” to display the corresponding MAC address entries.
MACSelect “MAC” to display the corresponding MAC address entries.
MAC AddressThis column displays the MAC addresses.
TypeThis column displays whether the entry was entered manually (static) or pulled by the switch (dynamic).
VLAN IDThis column displays the VLAN ID of the MAC address entry.
Port/Trunk IDThis column displays the port numbers to which the MAC address entry is connected. “CPU” is the MAC address entry of the switch.
Total countsThis display field displays the total number of entries in the MAC address table.
Page UPThis button can be used to scroll up for many MAC address entries.
Page DownThis button can be used to scroll down for many MAC address entries.

9.2.2.3 Age Time Setting

MAC Management Static MAC Settings MAC Table Age Time Setting Refusal MAC Settings Age Time Setting Age Time 300 (sec) (Range:0 or 20-500) Apply Refresh

Figure 34: WBM Page, "MAC Management" – "Age Time Setting" Tab

Table 39: WBM Page, "MAC Management" – "Age Time Setting" Tab

Age Time Setting
ParametersDefaultDescription
Age Time (sec) (Range:0 or 20-500)300Enter the “Age Time” in this input field. Valid range: 20 ... 500 s.

9.2.2.4 Refusal MAC Settings

Wago 852-1505 - Refusal MAC Settings - 1

Note

Additional Information

Please refer to the section "Function Description" for more information on "Refusal MAC Settings".

Wago 852-1505 - Additional Information - 1

Note

Maximum number of MAC blacklist entries

Up to 20 entries can be configured.

MAC Management Static MAC Settings MAC Table Age Time Setting Refusal MAC Settings Refusal MAC Settings MAC Address VLAN ID Any Apply Refresh Refusal MAC Table MAC Address VLAN ID Action Total counts : 0

Figure 35: WBM Page, "MAC Management" – "Refusal MAC Settings" Tab

Table 40: WBM Page, "MAC Management" – "Refusal MAC Settings" Tab

Refusal MAC Settings
ParametersDefaultDescription
MAC AddressEnter the MAC address of a computer or device that you want to reject.The valid format is: hh:hh:hh:hh:hh:hh.
VLAN IDAnyThe switch receives any VLAN ID.
VlanEnter the VLAN ID that you want to assign to the computer or device.
Refusal MAC Settings
ParametersDefaultDescription
MAC AddressThis column displays the MAC addresses.
VLAN IDThis field displays the VLAN ID of the MAC address entry.
ActionClick [Delete], to delete a MAC address entry manually entered from the blacklist table.
Total countsThis field displays the total number of entries in the blacklist table.

9.2.3 Port Mirroring

Wago 852-1505 - Port Mirroring - 1

Note

Additional Information

Please refer to the section "Function Description" for more information on "Port Mirroring".

Wago 852-1505 - Additional Information - 1

Note

Monitor Port

The monitor port cannot be a member of any "Truck Port" group.

The monitor port cannot be an ingress or egress port.

If a port has been configured as a source port and a user then configures it as a destination port, the port is automatically deleted from the source ports.

Port Mirroring Port Mirroring Settings State Disable Monitor to Port 1 All Ports : - Source Port Mirror Mode Source Port Mirror Mode 1 Disable 2 Disable 3 Disable 4 Disable 5 Disable 6 Disable 7 Disable 8 Disable 9 Disable 10 Disable Apply Refresh

Figure 36: WBM "Port Mirroring" Page

Table 41: WBM "Port Mirroring" Page

Port Mirroring Settings
ParametersDefaultDescription
StateDisableSelect “Disable” to disable the “Port Mirroring”.
EnableSelect “Enable” to enable the “Port Mirroring”.
Monitor to Port1Select a port to be connected to a “Network Traffic Analyzer”.
All Ports-Settings in this select box apply to all ports.Make settings here to be applied to all ports.Start here with general settings and then change the settings for individual ports.
Disable
Ingress
Egress
Both
Source Port1 ... 10This column displays the number of individual source ports.
Mirror ModeDisableSelect “Disable” to prevent traffic being copied from the specified source port to the monitor port.
IngressSelect “Ingress” to only copy the input data (incoming) from the specified source ports to the monitor port.
EgressSelect “Egress” to only copy the output data (outgoing) from the specified source ports to the monitor port.
BothSelect “Both” to copy both incoming and outgoing data from the specified source ports to the monitor port.

9.2.4 Port Settings

9.2.4.1 General Settings

Port Settings General Settings Information Port Settings Port State Speed/Duplex Flow Control From: 1 to: 1 Enable Auto Off Apply Refresh Port Status Port State Speed/Duplex Flow Control Link Status 1 Enable Auto Off 100M / Full / Off 2 Enable Auto Off Link Down 3 Enable Auto Off Link Down 4 Enable Auto Off Link Down 5 Enable Auto Off Link Down 6 Enable Auto Off Link Down 7 Enable Auto Off 100M / Full / Off 8 Enable Auto Off Link Down 9 Enable 1000M / Full Off Link Down 10 Enable 100M / Full Off Link Down

Figure 37: WBM Page, "Port Settings" – "General Settings" Tab

Table 42: WBM Page, "Port Settings" – "General Settings" Tab

Port Settings
ParametersDefaultDescription
PortFrom:1Select a port or port range that you want to configure.
to:1Select a port or port range that you want to configure.
StateDisableSelect “Disable” to disable the port.
EnableSelect “Enable” to enable the port.
Speed/DuplexAutoSelect the speed and duplex mode of the port.
10 Mbit/s / Full Duplex
10 Mbit/s / Half Duplex
100 Mbit/s / Full Duplex
100 Mbit/s / Half Duplex
1000 Mbit/s / Full Duplex
Flow ControlOffSelect “Off” to disable access to the port's buffer resources and to interrupt operation of the switches in the network.Select “On” to maintain access to the port's buffer resources and to ensure lossless operation of the switches in the network.
On
Port State
ParametersDefaultDescription
Port1 ... 10This column displays the port numbers.
StateThis column displays if the port is enabled or disabled.
Speed/DuplexThis column displays the configured speed (10 Mbit/s, 100 Mbit/s or 1000 Mbit/s) and duplex mode (full or half-duplex) for a port.
Flow ControlThis column displays whether the port's “Flow Control” is set to “On” or “Off”.
Link StateThis column displays the link status of a port. If the port is up, the speed, duplex mode and “Flow Control” settings are displayed. “Link Up” displays that the port is either disabled or no device is connected.

9.2.4.2 Information

Port Settings General Settings Information Port Settings Port Description From: 1 To: 1 fastethernet1/0/1 Apply Refresh Port Status Port Description Status Uptime Medium Mode 1 fastethernet1/0/1 Normally 0 days 3:49:4 Copper 2 fastethernet1/0/2 Blocked by Jet Ring, 0 days 0:0:0 Copper 3 fastethernet1/0/3 Blocked by Jet Ring, 0 days 0:0:0 Copper 4 fastethernet1/0/4 Blocked by Jet Ring, 0 days 0:0:0 Copper 5 fastethernet1/0/5 Blocked by Jet Ring, 0 days 0:0:0 Copper 6 fastethernet1/0/6 Blocked by Jet Ring, 0 days 0:0:0 Copper 7 fastethernet1/0/7 Normally 0 days 3:49:4 Copper 8 fastethernet1/0/8 Blocked by Jet Ring, 0 days 0:0:0 Copper 9 gigabitethernet1/0/9 Blocked by Jet Ring, 0 days 0:0:0 Fiber 10 gigabitethernet1/0/10 Blocked by Jet Ring, 0 days 0:0:0 Fiber

Figure 38: WBM Page, "Port Settings" – "Information" Tab

Table 43: WBM Page, "Port Settings" – "Information" Tab

Port Settings
ParametersDefaultDescription
PortFrom:1Select a port or port range that you want to display.
To:1Select a port or port range that you want to display.
Description
Port Status
ParametersDefaultDescription
Port1 ... 10This column displays the port numbers.
DescriptionThis column displays the name of the port.
StatusThis column displays the status of the port.
UptimeThis column displays the operating mode of the port.
Medium ModeCopperFiberThis column displays the connection type.
Copper wire
Fiber optic cable

9.3 Advanced Settings

9.3.1 Bandwidth Settings

9.3.1.1 QoS

Wago 852-1505 - QoS - 1

Note

Additional information

More information about "QoS" (Quality of Service) is available in the section "Function Description."

Figure 39: WBM "QoS" Page – "Port Priority" Tab

Table 44: WBM "QoS" Page – "Port Priority" Tab

Port Priority Settings
ParameterDefaultDescription
All ports have IEEE 802.1p priority.-In the selection box, enter the priority value for all ports.The value indicates the packet priority and is added to the “Priority Tag” field of the incoming packets.
0 ... 70 = Lowest priority7 = Highest priority
Port1 ... 10This column shows the port numbers.
IEEE 802.1p Priority0 ... 7In the selection box, select a priority for packets received on this port. Only packets without “IEEE 802.1p Tag Priority” are assigned the priority specified here.

9.3.1.1.2 IP DiffServ (DSCP)

QoS Port Priority IP DiffServ (DSCP) Priority/Queue Mapping Schedule Mode DSCP Settings Mode Tag Over DSCP DSCP Priority DSCP Priority DSCP Priority DSCP Priority DSCP 0 0✓ DSCP 1 0✓ DSCP 2 0✓ DSCP 3 0✓ DSCP 4 0✓ DSCP 5 0✓ DSCP 6 0✓ DSCP 7 0✓ DSCP 8 0✓ DSCP 9 0✓ DSCP 10 0✓ DSCP 11 0✓ DSCP 12 0✓ DSCP 13 0✓ DSCP 14 0✓ DSCP 15 0✓ DSCP 16 0✓ DSCP 17 0✓ DSCP 18 0✓ DSCP 19 0✓ DSCP 20 0✓ DSCP 21 0✓ DSCP 22 0✓ DSCP 23 0✓ DSCP 24 0✓ DSCP 25 0✓ DSCP 26 0✓ DSCP 27 0✓ DSCP 28 0✓ DSCP 29 0✓ DSCP 30 0✓ DSCP 31 0✓ DSCP 32 0✓ DSCP 33 0✓ DSCP 34 0✓ DSCP 35 0✓ DSCP 36 0✓ DSCP 37 0✓ DSCP 38 0✓ DSCP 39 0✓ DSCP 40 0✓ DSCP 41 0✓ DSCP 42 0✓ DSCP 43 0✓ DSCP 44 0✓ DSCP 45 0✓ DSCP 46 0✓ DSCP 47 0✓ DSCP 48 0✓ DSCP 49 0✓ DSCP 50 0✓ DSCP 51 0✓ DSCP 52 0✓ DSCP 53 0✓ DSCP 54 0✓ DSCP 55 0✓ DSCP 56 0✓ DSCP 57 0✓ DSCP 58 0✓ DSCP 59 0✓ DSCP 60 0✓ DSCP 61 0✓ DSCP 62 0✓ DSCP 63 0✓ Apply Refresh

Figure 40: WBM "QoS" Page – "IP DiffServ (DSCP)" Tab

Table 45: WBM "QoS" Page – "IP DiffServ (DSCP)" Tab

DSCP Settings
ParameterDefaultDescription
ModeTag over DSCPIn the selection box, select “Tag over DSCP” if the 802.1p tag has a higher priority than DSCP.
DSCP over TagIn the selection box, select “DSCP over Tag” if the 802.1p tag has a lower priority than DSCP.
DSCPDSCP 0 ... DSCP 63This column displays the DSCP fields.
Priority0 ... 7Select the respective priority level in the selection box.0 = Lowest priority7 = Highest priority

9.3.1.1.3 Priority/Queue Mapping

Port Priority IP DiffServ (DSCP) Priority/Queue Mapping Schedule Mode Priority/Queue Mapping Settings Reset to default Priority Queue ID 0 1 √ 1 0 √ 2 2 √ 3 3 √ 4 4 √ 5 5 √ 6 6 √ 7 7 √ Apply Refresh

Figure 41: WBM "QoS" Page – "Priority/Queue Mapping" Tab

Table 46: WBM "QoS" Page – "Priority/Queue Mapping" Tab

Priority/Queue Mapping Settings
ParameterDefaultDescription
Reset to Basic SettingsClick this button to reset the priority of the queue to the default values.
Priority0 ... 7This column displays the respective priority level.0 = Lowest priority7 = Highest priority
Queue ID0 ... 7In the selection box, select the number of a queue for packets with the priority level.

Table 47: Default Settings

PriorityQueue ID
02
10
21
33
44
55
66
77

9.3.1.1.4 Schedule Mode

Port Priority IP DiffServ (DSCP) Priority/Queue Mapping Schedule Mode Schedule Mode Settings Schedule Mode: High First(SPQ) Queue ID Weight Value (Range:1~127) 0 1 2 3 4 5 6 7 Apply Refresh

Figure 42: WBM "QoS" Page – "Schedule Mode" Tab

Table 48: WBM "QoS" Page – "Schedule Mode" Tab

Schedule Mode Settings
ParameterDefaultDescription
Schedule ModeStrict Priority Queuing (SPQ)In the selection box, select “Strict Priority Queuing (SPQ)” if you want to process the hardware priority queues sequentially.
Weighted Round Robin (WRR)In the selection box, select “Weighted Round Robin (WRR)” if you want to use the algorithm based on the queue weighting (the value entered in the “Weight Value (range: 1–127)” field).Processing queues with higher weighting is given precedence over processing those with lower weighting.
Queue ID0 ... 7This column indicates which queue is being configured.0 = Lowest priority7 = Highest priority
Weight Value(range: 1–127)1 ... 127The “Weight Value” can only be configured if “Weighted Round Robin (WRR)” is selected.The bandwidth is divided among the different “Traffic Queues” according to their weighting.0 = Lowest priority127 = Highest priority
NoteWago 852-1505 - Schedule Mode - 2Changing the “Weight Value (range: 1–127)”If you have selected “Strict Priority Queuing (SPQ),” you cannot change the “Weight Value.”You must first select “Weighted Round Robin (WRR).” You can then change “Strict Priority Queuing (SPQ).”

9.3.1.2 Rate Limitation

9.3.1.2.1 Broadcast Storm Control

Wago 852-1505 - Broadcast Storm Control - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "Broadcast Storm Control."

Rate Limitation Storm Control Bandwidth Limitation Storm Control Settings Port Rate Type From: 1 To: 1 (units) Mcast(Multicast) Disable 0. One unit is about 652 pps Apply Refresh Storm Control Status Port Rate(units) Multicast Broadcast DLF Port Rate(units) Multicast Broadcast DLF 1 1 Disable Enable Enable Enable 2 1 Disable Enable Enable 3 1 Disable Enable Enable Enable 4 1 Disable Enable Enable 5 1 Disable Enable Enable Enable 6 1 Disable Enable Enable 7 1 Disable Enable Enable Enable 8 1 Disable Enable Enable 9 1 Disable Enable Enable 10 1 Disable Enable Enable

Figure 43: WBM "Rate Limitation" Page – "Broadcast Storm Control" Tab

Table 49: WBM "Rate Limitation" Page – "Broadcast Storm Control" Tab

Storm Control Settings
ParameterDefaultDescription
Portfrom:1Select a port or port range in the selection box to configure the “Storm Control Settings.”
to:1Select a port or port range in the selection box to configure the “Storm Control Settings.”
Rate0In the selection box, choose the number of packets (of the type specified in the “Type” field) that the switch can receive per second.
TypeBcast (Broadcast)Choose “Bcast (Broadcast)” in the selection box to specify a limiting value for the number of broadcast packets received per second.
Mcast (Multicast)Choose “Mcast (Multicast)” in the selection box to specify a limiting value for the number of multicast packets received per second.
DLFChoose “DLF” in the selection box to specify a limiting value for the number of DLF packets received per second.
Mcast+BcastChoose “Mcast+Bcast” in the selection box to specify a limiting value for the number of multicast and broadcast packets received per second.
Mcast+DLFChoose “Mcast+DLF” in the selection box to specify a limiting value for the number of multicast and DLF packets received per second.
Bcast+DLFChoose “Bcast+DLF” in the selection box to specify a limiting value for the number of broadcast and DLF packets received per second.
Mcast+Bcast+ DLFChoose “Mcast+Bcast+DLF” in the selection box to specify a limiting value for the number of multicast, broadcast and DLF packets received per second.
Storm Control Status
ParameterDefaultDescription
Port1 ... 10This column shows the port numbers.
RateThis column displays the number of packets the switch can receive per second.
MulticastEnable DisableThis column indicates whether the rate setting applies to multicast.
BroadcastEnable DisableThis column indicates whether the rate setting applies to broadcast.
DLFEnable DisableThis column indicates whether the rate setting applies to DLF.

9.3.1.2.2 Rate Limitation

Wago 852-1505 - Rate Limitation - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "Rate Limitation."

Rate Limitation Storm Control Bandwidth Limitation Bandwidth Limitation Settings Port Ingress Egress From: 1 To: 1 (Mbs) 0 (Mbs) (Disable: 0) Apply Refresh Bandwidth Limitation Status Port Ingress (Mbs) Egress (Mbs) Port Ingress (Mbs) Egress (Mbs) 1 0 0 2 0 0 3 0 0 4 0 0 5 0 0 6 0 0 7 0 0 8 0 0 9 0 0 10 0 0 11 0 0 12 0 0

Figure 44: WBM "Rate Limitation" Page – "Rate Limitation" Tab

Table 50: WBM "Rate Limitation" Page – "Rate Limitation" Tab

Rate Limitation Settings
ParameterDefaultDescription
Portfrom:1Select a port or port range in the selection box to configure the “Rate Limitation Settings.”
to:1Select a port or port range in the selection box to configure the “Rate Limitation Settings.”
Ingress(Mbs)0Enter the “Rate Limitation” for incoming packets in the input field. Port 1 ... 8 0 ... 100 Port 9 ... 10(12) 0 ... 1000
Egress(Mbs)0Enter the “Rate Limitation” for outgoing packets in the input field.
Rate Limitation Status
ParameterDefaultDescription
Port1 ... 10This column shows the port numbers.
Ingress(Mbs)This column displays the bandwidth set for Ingress.
Egress(Mbs)This column displays the bandwidth set for Egress.

9.3.2 IGMP Snooping

Wago 852-1505 - IGMP Snooping - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "IGMP Snooping" (Internet Group Management Protocol Snooping).

9.3.2.1 IGMP Snooping

9.3.2.1.1 General Settings

IGMP Snooping General Settings Port Settings Querier Settings IGMP Snooping Settings IGMP Snooping State Disable Report Suppression State Disable IGMP Snooping VLAN State Add Unknown Multicast Packets Drop Apply Refresh IGMP Snooping Status IGMP Snooping State Disable Report Suppression State Disable IGMP Snooping VLAN State None Unknown Multicast Packets Drop

Figure 45: WBM "IGMP Snooping" Page – "General Settings" Tab

Table 51: WBM "IGMP Snooping" Page – "General Settings" Tab

IGMP Snooping Settings
ParameterDefaultDescription
IGMP Snooping StateDisableSelect “Disable” in the selection box to disable this function.
EnableSelect “Enable” in the selection box to enable “IGMP Snooping” and to forward multicast group data only to ports that are members of this group.
Report Suppression StateDisableSelect “Disable” to disable the “Report Suppression” function for “IGMP Snooping.”
EnableSelect “Enable” to enable the “Report Suppression” function for “IGMP Snooping.”
IGMP Snooping VLAN StateAddSelect “Add” in the selection box and enter the VLANs on which the switch should run “IGMP Snooping.”Valid range of VLAN IDs: 1 ... 4094.Use a comma (,) or hyphen (-) to specify individual VLANs or VLAN ranges.
DeleteSelect “Delete” in the selection box and enter the VLANs on which the switch should not run “IGMP Snooping.”
Unknown Multicast PacketsIn this selection box, specify the action to perform when the switch receives unknown multicast frames.
DiscardSelect “Discard” in the selection box to discard the frames.
ForwardSelect “Forward” in the selection box to forward the frames to all ports.
IGMP Snooping Status
ParameterDefaultDescription
IGMP Snooping StateDisable EnableThis display field indicates whether “IGMP Snooping” is enabled or disabled globally.
Report Suppression StateDisable EnableThis display field indicates whether the “Reporting Suppression Function” is enabled or disabled for “IGMP Snooping.”
IGMP Snooping VLAN StateNone 1 ... 4094This display field indicates the VLANs on which the switch runs “IGMP Snooping.”“None” is displayed if “IGMP Snooping” is not enabled for any port.
Unknown Multicast PacketsDiscard ForwardThis display field indicates whether the switch discards unknown multicast packets or forwards them to all ports.

9.3.2.1.2 Port Settings

Figure 46: WBM "IGMP Snooping" Page – "Port Settings" Tab

Table 52: WBM "IGMP Snooping" Page – "Port Settings" Tab

Port Settings
ParameterDefaultDescription
Portfrom:1Select a port or port range in the selection box to configure the “Port Settings.”
to:1Select a port or port range in the selection box to configure the “Port Settings.”
Querier ModeAutoIn the selection box, select the “Auto” setting if the switch should use the port as an “IGMP Query Port” if it receives “IGMP Query” packets.
FixIn this selection box, select the “Fix” setting if the switch should always use the port or ports as “IGMP Query Ports.”This setting is used if an IGMP multicast server is connected to the port(s).
EdgeIn this selection box, select the “Edge” setting if the switch should not use the port as an “IGMP Query Port.” In this case, the switch does not log the information that an IGMP router is connected to this port and does not forward the “IGMP Join/Leave” packets to this port.
Immediate LeaveDisableIn this selection box, select “Disable” to disable the “Immediate Leave” function on individual ports.
EnableIn this selection box, select “Enable” to enable the “Immediate Leave” function on individual ports.
Port Status
ParameterDefaultDescription
Port1 ... 10This column shows the port numbers.
Querier ModeAutoFixEdgeThis column displays the “Querier” mode for the specific port.
Immediate LeaveDisableEnableThis column displays the “Immediate Leave” setting for the specific port.

9.3.2.1.3 Querier Settings

IGMP Snooping General Settings Port Settings Querier Settings Querier Settings Querier State Disable Querier VLAN State Add Apply Refresh Querier Status Querier State Querier State Querier VLAN State None

Figure 47: WBM "IGMP Snooping" Page – "Querier Settings" Tab

Table 53: WBM "IGMP Snooping" Page – "Querier Settings" Tab

Querier Settings
ParameterDefaultDescription
Querier StateDisableSelect “Disable” in the selection box to disable this function.
EnableSelect “Enable” in the selection box to enable this function.
Querier VLAN StateAddSelect “Add” in the selection box to enter the VLAN ID.
DeleteSelect “Delete” in the selection box to delete the VLAN ID.
Querier Status
ParameterDefaultDescription
Querier StateDisable EnableThis field displays the querier status.
Querier VLAN StateNone 0 ... 4094This field displays the VLAN ID.

9.3.2.2 IGMP Filter

9.3.2.2.1 General Settings

IGMP Filtering General Settings Group Settings Port Settings IGMP Filtering Settings IGMP Filtering State Disable Profile Type Deny Apply Refresh IGMP Filtering Status Profile Way Type Ports Action

Figure 48: WBM "IGMP Filter" Page – "General Settings" Tab

Table 54: WBM "IGMP Filter" Page – "General Settings" Tab

IGMP Filter Settings
ParameterDefaultDescription
IGMP Filtering StateDisableSelect “Disable” in the selection box to disable this function.
EnableSelect “Enable” in the selection box to enable this function.
ProfileEnter the name for the IGMP filter in the input field.
TypeDenyIn the selection box, select “Deny” to deny access to the group.
PermitIn the selection box, select “Permit” to grant access to the group.
IGMP Filtering Status
ParameterDefaultDescription
ProfileThis column displays the name of the profile.Click the name to modify the profile.
TypeDenyPermitThis column displays the type of action.
Ports1 ... 10This column displays the ports on which the profile of the IGMP filter is enabled.
ActionDeleteClick [Delete] to delete the multicast addresses.

9.3.2.2.2 Multicast Groups

IGMP Filtering General Settings Group Settings Port Settings Group Settings Profile : Group Start Address End Address 1 Apply Refresh Group Status Profile Type Group Start Address End Addressilio

Figure 49: WBM "IGMP Filter" Page – "Multicast Groups" Tab

Table 55: WBM "IGMP Filter" Page – "Multicast Groups" Tab

Group Settings
ParameterDefaultDescription
ProfileSelect the profile in the selection box that you want to configure for a group.
Group1 ... 10Select a multicast group in the selection box.
Start AddressIn the input field, enter the first multicast address of the group that you want to configure.
End AddressIn the input field, enter the last multicast address of the group that you want to configure.
Group Status
ParameterDefaultDescription
ProfileThis column displays the name of the profile.
TypeDeny PermitThis column displays the type of action.
Group1 ... 10This column displays the group.
Start AddressThis column displays the first multicast address.
End AddressThis column displays the last multicast address.
ActionDeleteClick [Delete] to delete the multicast addresses.

9.3.2.2.3 Port Settings

IGMP Filtering General Settings Group Settings Port Settings IGMP Filtering Install For Ports Profile : ✓ Port Select All Deselect All 1 3 5 7 9 2 4 6 8 10 Apply Refresh Port Status Profile Way Type Ports

Figure 50: WBM "IGMP Filter" Page – "Port Settings" Tab

Table 56: WBM "IGMP Filter" Page – "Port Settings" Tab

Port Settings
ParameterDefaultDescription
ProfileSelect the profile in the selection box that you want to configure for a group.
PortSelect AllNo port is selected.
All ports are selected.
Disable AllNo port is disabled.
All ports are disabled.
1 ... 10The port is not enabled.
The port is enabled.
Port Status
ParameterDefaultDescription
ProfileThis column displays the name of the profile.
TypeDeny PermitThis column displays the type of action.
Ports1 ... 10This column displays the ports on which the profile of the IGMP filter is enabled.

9.3.2.3 Multicast VLAN Registration

Wago 852-1505 - Multicast VLAN Registration - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "Multicast VLAN Registration" (MVR).

9.3.2.3.1 MVR Settings

Multicast VLAN Registration MVR Settings Group Settings MVR Settings VLAN ID None Priority Override Disable State Enable Mode Dynamic 802.1p Priority 0 Source Ports (ex 1,3,5-8) Receiver Ports (ex 1,3,5-8) Tagged Ports (ex 1,3,5-8) Apply Refresh MVR Status VLAN ID 10 Name ultimately TestVLAN Priority override Disable State Enable Mode Dynamic 802.1p Priority 6 Source Ports 1-8 Receiver Ports None Tagged Ports 2 Delete

Figure 51: WBM "Multicast VLAN" Page – "MVR Settings" Tab

Table 57: WBM "Multicast VLAN" Page – "MVR Settings" Tab

MVR Settings
ParameterDefaultDescription
VLAN IDEnter the VLAN ID in the input field.
NameEnter the name for the MVR in the input field.
Priority OverrideDisableSelect “Disable” in the selection box to disable this function.
EnableSelect “Enable” in the selection box to enable this function.
StateEnableSelect “Enable” in the selection box to enable the MVR.
DisableSelect “Disable” in the selection box to disable MVR.
ModeDynamicSelect “Dynamic” in the selection box to configure the dynamic mode for the MVR.
CompatibleSelect “Compatible” in the selection box to configure the compatible mode for the MVR.
IEEE 802.1p Priority0 ... 7In the selection box, select a priority for packets received on this port. Only packets without an “802.1p Tag Priority” are assigned the priority specified here.
Source Ports1 ... 8Enter the source port or source port range for the MVR in the input field.Normally, the source ports are connected to the streaming server.
Receiver Ports1 ... 8Enter the receiver port or receiver port range for the MVR in the input field. Normally, the receiver ports are connected to the streaming client
Tagged Ports1 ... 8Enter the tagged port or port range for the MVR in the input field. The same applies to VLAN tagged ports.
MVR Status
ParameterDefaultDescription
VLAN IDThis field displays the VLAN ID.
NameThis field displays the name you chose.
Priority OverrideDisable EnableThis field displays the status.
StateDisable EnableThis field displays the status of the MVR.
ModeDynamic CompatibleThis field displays the mode of the MVR.
IEEE 802.1p Priority0 ... 7This field displays the packet priority you chose.
Source Ports1 ... 8This field displays the source port or source port range for the MVR.
Receiver Ports1 ... 8This field displays the receiver port or receiver port range for the MVR.
Tagged Ports1 ... 8This field displays the tagged port or port range for the MVR.

9.3.2.3.2 Group Settings

Multicast VLAN Registration MVR Settings Group Settings Group Settings MVR VLAN 10 Group Name Start Address Quantity: Apply Refresh Group Status MVR VLAN 10 Group Name Floor1 Address Range 225.225.225.225-233 Delete Delete all group

Figure 52: WBM "Multicast VLAN" Page – "Group Settings" Tab

Table 58: WBM "Multicast VLAN" Page – "Group Settings" Tab

Group Settings
ParameterDefaultDescription
MRV VLANSelect the number of MVR VLANs in the selection box.
Group NameEnter the group name for the MVR in the input field.
Start AddressEnter the multicast start address in the input field.
QuantityEnter the number of multicast addresses in the input field.
Group Status
ParameterDefaultDescription
MRV VLANThis field displays the number of MVR VLANs.
Group NameThis field displays the group name you chose.
Address RangeThis display fields shows the multicast start address.
DeleteClick [Delete] to delete this setting.
Delete all groupClick [Delete Entire Group] to delete the settings for the entire group.

9.3.2.4 Static Multicast Addresses

Note

Wago 852-1505 - Note - 1

Additional information

Please refer to the section "Function Description" for more information on "Static Multicast Addresses."

Multicast Address
Static Multicast Address Settings VLAN ID MAC Address Port 1 Apply Refresh Multicast Address Table VLAN ID MAC Address Status Port Action 1 01:00:5e:22:33:44 Static 1-10 Delete Total counts : 1

Figure 53: WBM "Static Multicast Addresses" Page

Table 59: WBM "Static Multicast Addresses" Page

Static Multicast Address Settings
ParameterDefaultDescription
VLAN ID1Select the VLAN ID in the selection box that you want to configure.
MAC AddressEnter the multicast MAC address of the respective ring in the input field.Configure a multicast MAC that should not receive an “Age Time.”The valid format is 0x:0x:0x:0x:0x:0x.
PortEnter the subscriber port for the multicast address in the input field.
Multicast Address Table
ParameterDefaultDescription
VLAN ID0 ... 4094This column displays the selected VLAN IDs.
MAC AddressThis column displays the multicast addresses.
StatusThis column displays the status of the multicast addresses.
Port1 ... 10This column shows the port numbers.
ActionClick [Delete] to delete the multicast addresses.
Number of EntriesThis field displays the total number of entries in the multicast address table.

9.3.2.5 Multicast Statistics

Multicast IP Statistics
Multicast IP Table

IndexPortMulticast GroupVIDTimeoutExplicit TrackingHost IP
110.0.0.01260Enabled
220.0.0.01260Enabled
330.0.0.01260Enabled
440.0.0.01260Enabled
550.0.0.01260Enabled
660.0.0.01260Enabled
770.0.0.01260Enabled
880.0.0.01260Enabled

Refresh

Figure 54: WBM "Multicast IP Statistics" Page
Table 60: WBM "Multicast Statistics" Page

Multicast IP Table
ParameterDefaultDescription
Index1 ... 10This column displays the number of entries.
Port1 ... 10This column displays the port number.
Multicast GroupThis column displays the IP address of the multicast group.
VLAN IDThis column displays the VLAN ID.
TimeoutThis column displays the timeout time.
Explicit TrackingThis column indicates whether “Explicit Tracking” is set.
Host IPThis column displays the host IP.

9.3.3 VLAN

Wago 852-1505 - VLAN - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "VLAN" (Virtual Local Area Network).

9.3.3.1 Port Isolation

Wago 852-1505 - Port Isolation - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "Port Isolation."

Port Isolation Port Isolation Settings From: 1 To: 1 Egress Port : Select All Deselect All ✓1 ✓3 ✓5 ✓7 ✓9 ✓2 ✓4 ✓6 ✓8 ✓10 ✓0 (CPU) Apply Refresh Port Isolation Status Egress Port Port 0 1 2 3 4 5 6 7 8 9 10 1 V V V V V V V V V V V V 2 V V V V V V V V V V V V V V V V 3 V V V V V V V V V V V V V V V V 4 V V V V V V V V V V V V V V V V V 5 V V V V V V V V V V V V V V V V 6 V V V V V V V V V V V V V V V V V 7 V V V V V V V V V V V V V V V V 8 V V V V V V V V V V V V V V V V V 9 V V V V V V V V V V V V V V V V 10 V V V V V V V V V V V V V V V.V

Figure 55: WBM "Port Isolation" Page

Table 61: WBM "Port Isolation" Page

Port Isolation Settings
ParameterDefaultDescription
Portfrom:1Select a port or port range in the selection box for which you want to configure the “Port Isolation” setting.
to:1Select a port or port range in the selection box for which you want to configure the “Port Isolation” setting.
Egress PortAn egress port is an outgoing port through which a data packet leaves.Selecting a port as an egress port means it will communicate with the port currently being configured.
Select AllNo egress port is selected.
All egress ports are selected.
Disable AllNo egress port is disabled.
All egress ports are disabled.
□ 0 (CPU) ...□ 10The egress port is not enabled.
The egress port is enabled.
Port Isolation Status
ParameterDefaultDescription
PortVV“V” indicates that the port’s packets can be sent to this port.
Egress Port-“-” indicates the port’s packets cannot be sent to this port.

9.3.3.2 VLAN

9.3.3.2.1 VLAN Settings

VLAN VLAN Settings Tag Settings Port Settings VLAN Settings VLAN ID VLAN Name Member Port From: To: Apply Refresh VLAN List VLAN ID VLAN Name VLAN Status Member Port Action 1 VLAN1 Static 1-10

Figure 56: WBM "VLAN" Page – "VLAN Settings" Tab

Table 62: WBM "VLAN" Page – "VLAN Settings" Tab

VLAN Settings
ParameterDefaultDescription
VLAN IDfrom:Enter the VLAN ID for this entry in the input field. Valid range: 1 ... 4094
to:Enter the VLAN ID for this entry in the input field. Valid range: 1 ... 4094
VLAN NameEnter a descriptive name for the VLAN in the input field for unique identification.The VLAN name should be a combination of numbers, letters, hyphens (-) and underscores (_).
Member PortIn the input field, enter the port numbers you want the switch to assign to the VLAN as members. You can designate multiple individual port numbers separating individual ports with a comma (,) or specifying port ranges with a hyphen (-).

Table 62: WBM "VLAN" Page – "VLAN Settings" Tab

VLAN List
ParameterDefaultDescription
VLAN ID1 ... 4094This column displays the index number of the VLAN entry.Click the number to modify the VLAN entry.
VLAN NameThis column displays the name of the VLAN.
VLAN StatusStaticDynamic802.1Q VLANThis column displays the status of the VLAN.
Member Port1-10This column indicates which ports are assigned to the VLAN as subscribers.
ActionClick [Delete] to delete the VLAN.
NoteWago 852-1505 - VLAN Settings - 2Deleting VLAN1VLAN1 cannot be deleted.

9.3.3.2.2 Tag Settings

VLAN VLAN Settings Tag Settings Port Settings Tag Settings VLAN ID From: To: Tag Port : Select All Deselect All 1 3 5 7 9 2 4 6 8 10 Apply Refresh Tag Status VLAN ID Tag Ports UnTag Ports 1 1-10

Figure 57: WBM "VLAN" Page – "Tag Settings" Tab

Table 63: WBM "VLAN" Page – "TAG Settings" Tab

Tag Settings
ParameterDefaultDescription
VLAN IDfrom:Enter the VLAN ID for this entry in the input field. Valid range: 1 ... 4094
to:Enter the VLAN ID for this entry in the input field. Valid range: 1 ... 4094
Tag PortSelect AllNo port is selected as a tagged port.
All ports are selected as tagged ports.
Disable AllNo tagged port is disabled.
All tagged ports are disabled.
□ 1 ... □ 10The port is not enabled.
The port is enabled.
Tag Status
ParameterDefaultDescription
VLAN ID1 ... 4094This column displays the VLAN ID.
Tag Ports1 ... 7This field displays the ports that have been assigned as tag ports.
Untagged Ports1 ... 7This field displays the ports that have been assigned as untagged ports.

9.3.3.2.3 Port Settings

VLAN VLAN Settings Tag Settings Port Settings Port Settings Port PVID Acceptable Frame From: 1 To: 1 1 All Apply Refresh Port Status Port PVID Acceptable Frame Port PVID Acceptable Frame 1 1 All 2 1 All 3 1 All 4 1 All 5 1 All 6 1 All 7 1 All 8 1 All 9 1 All 10 1 All

Figure 58: WBM "VLAN" Page – "Port Settings" Tab

Table 64: WBM "VLAN" Page – "Port Settings" Tab

Port Settings
ParameterDefaultDescription
Portfrom:1Select a port or port range in the selection box to configure the “Port Settings.”
to:1Select a port or port range in the selection box to configure the “Port Settings.”
PVID1Select the PVID (Port VLAN ID) in the selection box.
Acceptable FrameYou can specify the frame types allowed for a port in this selection box.
AllSelect “All” in the selection box if all frames (tagged and untagged) should be accepted on this port.
Only Untagged VLANsSelect “Only Untagged VLANs” in the selection box if only untagged frames should be accepted on this port.All tagged frames are dropped.
Only Tagged VLANsSelect “Only Tagged VLANs” in the selection box if only tagged frames should be accepted on this port.All untagged frames are dropped.
Port Status
ParameterDefaultDescription
Port1 ... 10This column shows the port numbers.
PVIDThis column displays the VLAN ID numbers.
Acceptable FrameAllOnly Untagged VLANsOnly Tagged VLANsThis field displays the type of frames allowed on the port.

9.3.3.3 GARP VLAN Registration Protocol

Wago 852-1505 - GARP VLAN Registration Protocol - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "GARP/GVRP" (Generic Attribute Registration Protocol/GARP VLAN Registration Protocol or Generic VLAN Registration Protocol).

9.3.3.3.1 GVRP

GARP VLAN Registration Protocol GVRP GARP Timer GVRP Settings GVRP State Disable Port State Registration Mode From: 1 To: 1 Disable Normal Apply Refresh GVRP Status Port State Registration Mode Port State Registration Mode 1 Disabled - 2 Disabled - 3 Disabled - 4 Disabled - 5 Disabled - 6 Disabled - 7 Disabled - 8 Disabled - 9 Disabled - 10 Disabled -

Figure 59: WBM "GARP VLAN Registration Protocol" Page – "GVRP" Tab

Table 65: WBM "GARP VLAN Registration Protocol" Page – "GVRP" Tab

GVRP Settings
ParameterDefaultDescription
GVRP StateDisableSelect “Disable” in the selection box to disable the “GVRP” function.
EnableSelect “Enable” in the selection box to enable the “GVRP” function and to exchange the VLAN configuration information with other GVRP switches.
Portfrom:1Select a port or port range in the selection box to configure the GVRP settings.
to:1Select a port or port range in the selection box to configure the GVRP settings.
StateDisableSelect “Disable” in the selection box to disable the “GVRP” function for the port.
EnableSelect “Enable” in the selection box to enable the “GVRP” function for the port.
Registration ModeNormalSelect “Normal” in the selection box to allow dynamic creation (if dynamic VLAN creation is enabled), registration and deregistration of VLANs on the trunk port.
ForbiddenSelect “Forbidden” in the selection box to deregister all VLANs (except VLAN 1) and to prevent any further creation or deregistration of VLANs on the “Trunk Port.”
GVRP Status
ParameterDefaultDescription
Port1 ... 10This column shows the port numbers.
StateDisable EnableThis column displays the status setting.
Registration ModeNormal ForbiddenThis column displays the selected registration mode.

9.3.3.3.2 GARP Timer

Wago 852-1505 - GARP Timer - 1

Note

Size of the “leave,” “join,” “leave” and “leave all” values

The value for "leave" must be greater than three times the value for "join" (leave >= join x 3).

The value for "leave all" must be gr

GARP VLAN Registration Protocol GVRP GARP Timer GARP Timer Settings Port Join Time Leave Time Leave All Time From: 1 ✓ To: 1 ✓ 20 60 1000 2*Join Time < Leave Time < Leave All Time Time unit:(centi-sec) Apply Refresh GARP Timer Status Port Join Time Hold Time Leave Time Leave All Time 1 20 10 60 1000 2 20 10 60 1000 3 20 10 60 1000 4 20 10 60 1000 5 20 10 60 1000 6 20 10 60 1000 7 20 10 60 1000 8 20 10 60 1000 9 20 10 60 1000 10 20 10 60 1000

Figure 60: WBM "GARP VLAN Registration Protocol" Page – "GARP Timer" Tab

Table 66: WBM "GARP VLAN Registration Protocol" Page – "GARP Timer" Tab

GARP Timer
ParameterDefaultDescription
Portfrom:1Select a port or port range in the selection box to configure the GARP timer.
to:1Select a port or port range in the selection box to configure the GARP timer.
Join Time20Enter the maximum time in milliseconds that the interface waits before sending VLAN messages.
Leave Time60Enter the maximum time in milliseconds that the interface waits after receiving a “Leave Message” before the interface leaves the VLAN specified in the message.
Leave All Time1000Enter the time interval in milliseconds after which the Leave All messages are sent to interfaces. Leave All messages can help to update information about current GVRP VLAN subscriber information in the network.
GARP Timer Status
ParameterDefaultDescription
Port1 ... 10This column shows the port numbers.
Join TimeThis column displays the Join Time.
Hold Time10This column displays the Hold Time.
Leave TimeThis column displays the Leave Time.
Leave All TimeThis column displays the Leave All Time.

9.3.3.4 IP Subnet VLAN

Wago 852-1505 - IP Subnet VLAN - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "IP Subnet VLAN."

IP Subnet VLAN IP Subnet VLAN Settings IP Address Subnet Mask VLAN Priority Apply Refresh Save Configurations IP Subnet VLAN Table Index IP Address Subnet Mask VLAN Priority Action

Figure 61: WBM "IP Subnet VLAN" Page

Table 67: WBM "IP Subnet VLAN" Page

IP Subnet VLAN Settings
ParameterDefaultDescription
IP AddressEnter the IP address of the IP subnet VLAN in the input field.
Subnet MaskEnter the subnet mask of the switch in the input field in decimal-point notation.
VLAN(1-4094)Enter the value for the IP subnet VLAN for the instance in the input field.Valid range: 1 ... 4094One or more data VLANs can be configured.
Priority0 ... 7Select the respective priority for the specific port in the selection box.0 = Lowest priority7 = Highest priority
IP Subnet VLAN Table
ParameterDefaultDescription
Index1 ... 10This column displays the number of entries.
IP AddressThis column displays the IP address of the IP subnet VLAN.
Subnet MaskThis column shows the subnet mask of the switch.
VLANThis column displays the IP subnet VLAN ID for the specific port.
Priority0 ... 7This column displays the priority for the specific port.
ActionClick [Delete] to delete the IP subnet VLAN addresses.
Number of EntriesThis field displays the total number of entries in the IP subnet VLAN table.

9.3.3.5 MAC VLAN

Wago 852-1505 - MAC VLAN - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "MAC VLAN" (Media Access Control-Virtual Local Area Network).

MAC VLAN MAC VLAN Settings MAC Address VLAN Priority (1~4094) 0 Ex:00:0B:04 will only filter 3 bytes of source mac address. 00:0B:04:11:22 will only filter 5 bytes of source mac address. 00:0B:04:11:22:33 will filter all bytes of source mac address. Apply Refresh MAC VLAN Table Index MAC Address VLAN Priority Action

Figure 62: WBM "MAC VLAN" Page

Table 68: WBM "MAC VLAN" Page

MAC VLAN Settings
ParameterDefaultDescription
MAC AddressEnter the first three or more bytes of the MAC address in the input field.
VLANEnter the value for the MAC VLAN for the instance in the input field. Valid range: 1 ... 4094 One or more data VLANs can be configured.
Priority0 ... 7Select the respective priority for the specific port in the selection box. 0 = Lowest priority 7 = Highest priority
MAC VLAN Table
ParameterDefaultDescription
Index1 ... 10This column displays the number of entries.
MAC AddressThis column displays the MAC address.
VLANThis column displays the VLAN ID for the specific port.
Priority0 ... 7This column displays the priority for the specific port.
ActionClick [Delete] to delete the multicast addresses.

9.3.3.6 Protocol VLAN

Protocol VLAN Protocol VLAN Settings Frame Type Ethernet Type VLAN Port List EthernetII Apply Refresh Protocol VLAN Table Index Frame Type Ethernet Type VLAN Port List Action

Figure 63: WBM "Protocol VLAN" Page

Table 69: WBM "Protocol VLAN" Page

Protocol VLAN Settings
ParameterDefaultDescription
Frame TypeETHERNETIISelect “ETHERNETII” in the selection box if you want to configure this frame type.
Non-LLC SNAPSelect “Non-LLC SNAP” in the selection box if you want to configure this frame type.
LLC SNAPSelect “LLC SNAP” in the selection box if you want to configure this frame type.
ETHERNET TypeEnter the ETHERNET type in the input field. (e.g., 0800)
VLAN(1–4094)1 ... 4094Enter the VLAN ID in the input field. Valid range: 1 ... 4094
Port List1 ... 10Enter the port or port group (e.g., 1–3) for the protocol VLAN in the input field.
Protocol VLAN Table
ParameterDefaultDescription
IndexThis column displays the number of entries.
Frame TypeThis column displays the frame type.
ETHERNET TypeThis column displays the ETHERNET type.
VLANThis column displays the VLAN ID.
Port ListThis column displays the port list.
ActionClick [Delete] to delete the multicast addresses.

9.3.3.7 Q-in-Q

Wago 852-1505 - Q-in-Q - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "Q-in-Q."

9.3.3.7.1 VLAN Stacking

Q-in-Q VLAN Stacking Port-based Q-in-Q Selective Q-in-Q VLAN Stacking Setting Action Disable Tunnel TPID Index TPID 1 (Default) 8100 (0000~ffff) Port Tunnel TPID Index From: 1 To: 1 1 (Default) Apply Refresh VLAN Stacking Status Tunnel TPID Index TPID 1 8100 2 8100 3 8100 4 8100 5 8100 6 8100 Port Tunnel TPID Index (TPID) Port Tunnel TPID Index (TPID) 1 1 (8100) 2 1 (8100) 3 1 (8100) 4 1 (8100) 5 1 (8100) 6 1 (8100) 7 1 (8100) 8 1 (8100) 9 1 (8100) 10 1 (8100)

Figure 64: WBM "Q-in-Q" Page – "VLAN Stacking" Tab

Table 70: WBM "Q-in-Q" Page – "VLAN Stacking" Tab

VLAN Stacking Settings
ParameterDefaultDescription
ActionDisableSelect “Disable” in the selection box to disable the “VLAN Stacking” function.
Port-BasedSelect “Port-Based” in the selection box for port-based execution of the “VLAN Stacking” function.
SelectiveSelect “Selective” in the selection box to execute the “VLAN Stacking” function selectively.
Tunnel TPID Index1 (Default) ... 6Select a table index number in the selection box.
TPID(0000-ffff)Enter a value for the TPID in the input field. Valid range: 0000 ... ffff
Portfrom:1Select a port or port range in the selection box to configure the “VLAN Stacking.”
to:1Select a port or port range in the selection box to configure the “VLAN Stacking.”
Tunnel TPID Index1 (Default) ... 6Select a “Tunnel TPID Index” in the selection box.
VLAN Stacking Status
ParameterDefaultDescription
Tunnel TPID Index1 ... 6This column displays the table index number.
TPID0000 ... ffffThis column displays the TPID.
Port1 ... 10This column displays the port number.
Tunnel TPID Index(TPID)This column displays the index number for the specific port.

9.3.3.7.2 Port-Based Q-in-Q

Q-in-Q VLAN Stacking Port-based Q-in-Q Selective Q-in-Q Port-based Q-in-Q Port Role SPVID Priority From: 1 To: 1 Normal 1 (1-4094) 0 Apply Refresh Port-based Q-in-Q Status Port Role SPVID Priority Port Role SPVID Priority 1 Normal 1 0 2 Normal 1 0 3 Normal 1 0 4 Normal 1 0 5 Normal 1 0 6 Normal 1 0 7 Normal 1 0 8 Normal 1 0 9 Normal 1 0 10 Normal 1 0

Figure 65: WBM "Q-in-Q" Page – "Port-Based Q-in-Q" Tab

Table 71: WBM "Q-in-Q" Page – "Port-Based Q-in-Q" Tab

Port-Based Q-in-Q
ParameterDefaultDescription
Portfrom:1Select a port or port range in the selection box to configure the “Q-in-Q.”
to:1Select a port or port range in the selection box to configure the “Q-in-Q.”
RoleNormalSelect “Normal” in the selection box to select this role for the specific port.
AccessSelect “Access” in the selection box to select this role for the specific port.
TunnelSelect “Tunnel” in the selection box to select this role for the specific port.
SPVID(1-4094)1Enter the service provider VLAN “SPVID” in the input field. Valid range: 1 ... 4094
Priority0 ... 7Select the respective priority for the specific port in the selection box. 0 = Lowest priority 7 = Highest priority
Port-Based Q-in-Q Status
ParameterDefaultDescription
Port1 ... 10This column displays the port number.
RoleThis column displays the role of the specific port.
SPVID1 ... 10This column displays the SPVID.
PriorityThis column displays the priority for the specific port.

9.3.3.7.3 Selective Q-in-Q

Q-in-Q VLAN Stacking Port-based Q-in-Q Selective Q-in-Q Selective Q-in-Q Setting Name Access Ports (ex. 1,3,5-6) Tunnel Ports (ex. 1,3,5-6) CVID (Range: 1~4094) SPVID (Range: 1~4094) Selective Q-in-Q Setting 0 ✓ Priority Disable ✓ Apply Refresh Selective Q-in-Q Status No. Name Access Ports Tunnel Ports CVID SPVID Priority Action Disable 1 Floor1 2 3 1 1 1 Enable Delete

Figure 66: WBM "Q-in-Q" Page – "Selective Q-in-Q" Tab

Table 72: WBM "Q-in-Q" Page – "Selective Q-in-Q" Tab

Selective Q-in-Q Settings
ParameterDefaultDescription
NameEnter the name for the selective Q-in-Q profile in the input field.
Access Ports (ex. 1, 3, 5–6)Enter the access port or access port range in the input field.
Tunnel Ports (ex. 1, 3, 5–6)Enter the tunnel port or tunnel port range in the input field.
CVID (Range: 1–4094)Enter a customer VLAN “CVID” in the input field. Valid range: 1 ... 4094
SPVID (Range: 1–4094)Enter a service provider VLAN “SPVID” in the input field. Valid range: 1 ... 4094
Selective Q-in-Q Settings0 ... 7Select the respective priority level in the selection box.0 = Lowest priority7 = Highest priority
PriorityDisableSelect “Disable” in the selection box to disable this function.
EnableSelect “Enable” in the selection box to enable this function.
Selective Q-in-Q Status
ParameterDefaultDescription
No.This column displays the index number.
NameThis column displays the name of the selective Q-in-Q profile.
Access PortsThis column displays the access port.
Tunnel PortsThis column displays the tunnel port.
CVIDThis column displays the customer VLAN “CVID.”
SPVIDThis column displays the service provider VLAN “SPVID.”
Priority0 ... 7This column displays the respective priority level.0 = Lowest priority7 = Highest priority
ActionDisable EnableThis column displays the selected action.
DisableClick [Delete] to delete the selective Q-in-Q settings.

9.3.4 DHCP Relay

Wago 852-1505 - DHCP Relay - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "DHCP Relay" (Dynamic Host Configuration Protocol Relay).

DHCP Relay DHCP Relay Settings State Disable VLAN State Add DHCP Server IP 0.0.0.0 Apply Refresh DHCP Relay Status DHCP Relay State Disable Enabled on VLAN None DHCP Server IP 0.0.0.0

Figure 67: WBM "DHCP Relay" Page

Table 73: WBM "DHCP Relay" Page

DHCP Relay Settings
ParameterDefaultDescription
StateDisableSelect “Disable” in the selection box to disable “DHCP Relay.”
EnableSelect “Enable” in the selection box to enable “DHCP Relay.”
VLAN StateAddSelect “Add” in the selection box and enter the VLANs on which the switch should run “DHCP Relay.”Valid range of VLAN IDs: 1 ... 4094.Use a comma (,) or hyphen (-) to specify individual VLANs or VLAN ranges.
DeleteSelect “Delete” in the selection box and enter the VLANs on which the switch should not run “DHCP Relay.”
DHCP Server IP0.0.0.0Enter the IP address of the DHCP server in the input field.
DHCP Relay Status
ParameterDefaultDescription
DHCP Relay StateDisable EnableThis display field indicates whether “DHCP Relay” is enabled or disabled.
Enabled on VLANNone0 ... 4094This field indicates whether a VLAN is used.
DHCP Server IPThis field displays the IP address of the DHCP server.

9.3.5 DHCP Options

DHCP Options

DHCP Option 82 Settings
Option 82 State Disable Option 82 Frame 1 Option 82 Shelf 0 Option 82 Slot 0 Circuit-ID Form %HOSTNAME+%SPACE+eth/+%FRAME+/+%SHELF+/+%SLOT+:+%PORT+ Remote-ID Form %HOSTNAME+%SPACE+eth/+%FRAME+/+%SHELF+/+%SLOT+:+%PORT+

Option 82 Command State
Port 1 ✓ Option 82 State Disable ✓ Circuit-ID String Remote-ID String Apply Refresh Save Configurations

Option 82 Command State

Port 1 Option 82 State Disable Circuit-ID String Remote-ID String Port 2 Option 82 State Disable Circuit-ID String Remote-ID String

Figure 68: WBM "DHCP Options" Page

Table 74: WBM "DHCP Options" Page

DHCP Option 82 Settings
ParameterDefaultDescription
Option 82 StateDisableSelect “Disable” in the selection box to disable “DHCP Option 82” on the switch.
EnableSelect “Enable” in the selection box to enable “DHCP Option 82” on the switch.
Option 82 Frame1Enter the desired frame number in the input field.
Option 82 Shelf0Enter the desired shelf number in the input field to uniquely identify the switch.
Option 82 Slot0Enter the desired slot number in the input field to uniquely identify the switch.
Circuit ID Form%HOSTNAME+%SPACE+eth/+%FRAME+/+%SHELF+/+%SLOT+:+%PORT++%SVLAN+:+%CVLANThis input field gives you the option of adapting the appended string.
Remote ID Form%HOSTNAME+%SPACE+eth/+%FRAME+/+%SHELF+/+%SLOT+:+%PORT++%SVLAN+:+%CVLANThis input field gives you the option of adapting the appended string.
Option 82 Command State
ParameterDefaultDescription
Port1 ... 10Select a port in the selection box.
Option 82 StateDisableSelect “Disable” in the selection box to disable “Option 82 Command State” on the switch.
EnableSelect “Enable” in the selection box to enable “Option 82 Command State” on the switch.
Circuit ID StringEnter “Circuit ID String” in the input field.
Remote ID StringEnter “Remote ID String” in the input field.
Option 82 Command State
ParameterDefaultDescription
Port 1 ... 10This field displays the port numbers.
Option 82 StatusThis field displays the “Option 82 Status.”
Circuit ID StringThis field displays the “Circuit ID String.”
Remote ID StringThis field displays the “Remote ID String.”

9.3.6 Dual Homing

Wago 852-1505 - Dual Homing - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "Dual Homing."

Dual Homing

Dual Homing Settings State Disable Primary Channel Port Secondary Channel Port Apply Refresh Dual Homing Status State Disable Primary Channel None Secondary Channel None

Figure 69: WBM "Dual Homing" Page

Table 75: WBM "Dual Homing" Page

Dual Homing Settings
ParameterDefaultDescription
StateDisableSelect “Disable” in the selection box to disable “Dual Homing.”
EnableSelect “Enable” in the selection box to enable “Dual Homing.”
Group ID1 ... 4Select an Dual Homing group that you want to view.
Group StatusDisableSelect “Disable” in the selection box to disable this function.
EnableSelect “Enable” in the selection box to enable this function.
Primary ChannelAddSelect “Add” in the selection box to add a primary channel.
ResetSelect “Reset” in the selection box to reset the primary channel.
PortThe primary channel is configured in this field. Select “Port” in the selection box to configure only a single port.
TrunkThe secondary channel is configured in this field. Select “Trunk” in the selection box to configure only a single “Trunk Group.”
Enter the number of the primary channel in the input field.
Secondary ChannelAddSelect “Add” in the selection box to add a secondary channel.
ResetSelect “Reset” in the selection box to reset the secondary channel.
PortThe secondary channel is configured in this field. Select “Port” in the selection box to configure only a single port.
TrunkThe secondary channel is configured in this field. Select “Trunk” in the selection box to configure only a single “Trunk Group.”
Enter the number of the secondary channel in the input field.
Dual Homing Status
ParameterDefaultDescription
Group ID1 ... 4This field displays the Dual Homing group ID.
Group StatusDisable EnableThis field indicates what status “Dual Homing” has.
Primary ChannelNone Port 1 ... 10This field displays the selected primary channel.
Secondary ChannelNone Port 1 ... 10This field displays the selected secondary channel.

9.3.7 Dual Ring

Wago 852-1505 - Dual Ring - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "Dual Ring."

Dual Ring

Dual Ring Settings

State

Disable

Wago 852-1505 - Dual Ring Settings - 1

Xpress Ring Role

Forward

Wago 852-1505 - Dual Ring Settings - 2

Xpress Ring PORT-1

None

Wago 852-1505 - Dual Ring Settings - 3

Xpress Ring PORT-2

None

Wago 852-1505 - Dual Ring Settings - 4

Xpress Ring Destination MAC (Last byte)

10

Subring PORT-1

None

Wago 852-1505 - Dual Ring Settings - 5

Subring PORT-2

None

Wago 852-1505 - Dual Ring Settings - 6

Apply

Refresh

Dual Ring Status

Xpress Ring PORT-1 State

No connection

Xpress Ring PORT-2 State

No connection

Subring PORT-1 State

No connection

Subring PORT-2 State

No connection

Subring Bridge Role

Disabled

Subring Master Bridge MAC

00:30:de:ff:dd:16

Figure 70: WBM "Dual Ring" Page

Table 76: WBM "Dual Ring" Page

Dual Ring Settings
ParameterDefaultDescription
StateDisableSelect “Disable” in the selection box to disable “Dual Ring.”
EnableSelect “Enable” to enable “Dual Ring.”
Xpress Ring RoleForwardingSelect “Forwarding” in the selection box if the switch should operate in the Xpress Ring as a forwarder.
ArbiterSelect “Arbiter” in the selection box if the switch should operate in the Xpress Ring as an arbiter.
Xpress Ring PORT 1NoneSelect “None” in the selection box if you do not want to select a port.
1 ... 10Select Port 1 in the Xpress ring in the selection box.
Xpress Ring PORT 2NoneSelect “None” in the selection box if you do not want to select a port.
1 ... 10Select Port 2 in the Xpress ring in the selection box.
Xpress Ring Destination MAC Address (Last Byte)f0Enter the Xpress ring ID in the input field.
Subring PORT 1NoneSelect “None” in the selection box if you do not want to select a port.
1 ... 10Select Port 1 in the jet ring in the selection box.
Subring PORT 2NoneSelect “None” in the selection box if you do not want to select a port.
1 ... 10Select Port 2 in the jet ring in the selection box.
Dual Ring Status
ParameterDefaultDescription
Xpress Ring PORT 1 StatusForwarding BlockingThis field indicates what status Xpress ring port 1 has.
Xpress Ring PORT 2 StatusForwarding BlockingThis field indicates what status Xpress ring port 2 has.
Subring PORT 1 StatusForwarding BlockingThis field indicates what status Jet Ring Port 1 has.
Subring PORT 2 StatusForwarding BlockingThis field indicates what status jet ring port 2 has.
Subring Bridge RoleForwarder MasterThis field displays the role of the switch in the Xpress ring.
Subring Master Bridge MACThis field displays the MAC ID of the jet ring.

9.3.8 ERPS

Wago 852-1505 - ERPS - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "ERPS" (ETHERNET Ring Protection Switching).

9.3.8.1 Ring Settings

ERPS Ring Settings Instance Settings ERPS Global Settings Global State Enable ERPS Ring Settings Ring ID (1-255) State Disable Ring Name Revertive Enable Instance 0 (0:Disable, 0-30) Ring Type Major-ring Control VLAN (1-4094) Version v2 Holdoff Timer (ms) 0 (0-10000) WTR Timer (min) 5 (5-12) MEL 7 (0-7) Guard Timer (ms) 500 (10-2000) Left Port None Normal Right Port None Normal Apply Refresh ERPS Ring Status Ring ID 249 State Enable Ring Name Major249 Revertive Enable Instance None Ring Type Major-ring Control VLAN 249 Version v2 Holdoff Timer (ms) 0 WTR Timer (min) 5 MEL 7 Guard Timer (ms) 500 Left Port 9 Left Port Type RPL Normal Right Port 10 Right Port Type RPL Normal Right Port Type No connection Right Port Status Frowarding Ring Status Initialization delete

Figure 71: WBM "ERPS" Page – "Ring Settings" Tab

Table 77: WBM "ERPS" Page – "Ring Settings" Tab
ERPS Global Settings

ParameterDefaultDescription
Global StateDisableSelect “Disable” in the selection box to disable the “ERPS” function.
EnableSelect “Enable” in the selection box to enable the “ERPS” function.
ERPS Ring Settings
ParameterDefaultDescription
Ring ID(1-255)Enter the ring ID in the input field. Valid range: 1 ... 255
StatusDisableSelect “Disable” in the selection box to disable the state of the ring.
EnableSelect “Enable” in the selection box to enable the state of the ring.
Ring NameEnter the name of the ring (max. 32 characters) in the input field.(e.g., Major Ring ID255)
RevertiveEnableSelect “Enable” to enable revertive mode.
DisableSelect “Disable” in the selection box to disable revertive mode.
Instance(0:Disable, 0~30)Enter the instance for the ring in the input field. Valid range: 0 ... 300 (“Disable”) means that the ERPS is running in version 1. The control VLAN of the instance should be the same as the control VLAN below it.
Ring TypeMajor RingSelect “Major Ring” in the selection box if the switch should operate in the major ring.
SubringSelect “Subring” in the selection box if the switch should operate in the subring.
Control VLAN(1-4094)1 ... 4094Enter the VLAN ID in the input field that should serve as the domain for the ERPS control packets. Valid range: 1 ... 4094
Versionv2Select “v2” in the selection box if you want to use Version 2 of the “ERPS” function.
v1Select “v1” in the selection box if you want to use Version 1 of the “ERPS” function.
Holdoff Timer (ms)(0-10000)0Enter the value for the “Holdoff Timer” for the ring in the input field.Time: 0 ... 10000 ms.
WTR Timer (min)(5-720)300Enter the value for the “WTR Timer” for the ring in the input field.Time: 5 ... 720 min
MEL(0-7)7Enter the value for the “Control MEL” (Maintenance Entity Group Level) for the ring in the input field.The MEL specifies the priority.0 = Lowest priority7 = Highest priority

Table 77: WBM "ERPS" Page – "Ring Settings" Tab

Guard Timer (ms)(10–2000)500Enter the value for the “Guard Timer” for the ring in this input field.Time: 10 ... 2000 ms.
Left PortThe selection box is used to configure the left port and its type for the ring.
NoneSelect “None” in the selection box if you do not want to select a port.
1 ... 10Select the corresponding port in the selection box.
NormalSelect “Normal” in the selection box if the port is not assigned any specific function in the ERPS ring.
NeighborSelect “Neighbor” in the selection box if the neighboring port has the “Neighbor” function.
OwnerSelect “Owner” in the selection box if the port should take on the “Owner” function in the ERPS ring.
Right PortThis selection box is used to configure the right port and its type for the ring.
NoneSelect “None” in the selection box if you do not want to select a port.
1 ... 10Select the corresponding port in the selection box.
NormalSelect “Normal” in the selection box if the port is not assigned any specific function in the ERPS ring.
NeighborSelect “Neighbor” in the selection box if the neighboring port has he “Neighbor” function.
OwnerSelect “Owner” in the selection box if the port should take on the “Owner” function in the ERPS ring.
Left Port Enhance ModeDisableSelect “Disable” in the selection box if a device that supports ERPS is connected to this port.
EnableSelect “Enable” in the selection box if a device that does not support ERPS is connected to this port.Please note the Aging Time of the connected device.
Right Port Enhance ModeDisableSelect “Disable” in the selection box if a device that supports ERPS is connected to this port.
EnableSelect “Enable” in the selection box if a device that does not support ERPS is connected to this port.Please note the Aging Time of the connected device.
Alarm RelayDisableSelect “Disable” in the selection box to disable the alarm relay.
EnableSelect “Enable” in the selection box to enable the alarm relay.

Table 77: WBM "ERPS" Page – "Ring Settings" Tab

ERPS Ring Status
ParameterDefaultDescription
Ring ID1 ... 255This field displays the ring ID.
StateDisable EnableThis field displays the ring status.
Ring NameThis field displays the ring name.
RevertiveEnable DisableThis field displays the status of the revertive mode.
InstanceThis field displays the instance for the ring.
Ring TypeMajor Ring SubringThis field displays the ring type.
Control VLAN1 ... 4084This field displays the VLAN of the controller.
Versionv2 v1This field displays the version of the “ERPS” function.
Holdoff Timer (ms)0 ... 10000This field displays the time for the “Holdoff Timer.”
WTR Timer (min)5 ... 12This field displays the time for the “WTR Timer.”
MEL0 ... 7This field displays the value for the “Control MEL.”
Guard Timer (ms)10 ...2000This field displays the time for the “Guard Timer.”
Left PortNone 1 ... 10This field displays the port number of the left port.
Right PortNone 1 ... 10This field displays the port number of the right port.
Left Port TypeNormal Neighbor OwnerThis field displays the type of the left port.
Right Port TypeNormal Neighbor OwnerThis field displays the type of the right port.
Left Port Enhance ModeEnable DisableThis field displays the status of the left port.
Right Port Enhance ModeEnable DisableThis field displays the status of the right port.
Left Port StatusForwarding BlockingThis field displays the current status of the left port.
Right Port StatusForwarding BlockingThis field displays the current status of the right port.
Ring StatusProtection IdleThis field displays the ring status.
Alarm RelayEnable DisableThis field displays the status of the alarm relay.
DeleteClick [Delete] to delete this setting.

9.3.8.2 Instance Settings

ERPS Ring Settings Instance Settings Instance Settings Instance (1~30) Control VLAN Data VLAN Übernehmen Aktualisieren Instance Status Instance 1 Control VLAN 2 Data VLAN 3 undefined

Figure 72: WBM "ERPS" Page – "Instance Settings" Tab

Table 78: WBM "ERPS" Page – "Instance Settings" Tab

Instance Settings
ParameterDefaultDescription
Instance(1–30)Enter the instance ID in the input field. Valid range: 1 ... 30
Control VLANEnter the VLAN of the controller for the instance in the input field. Valid range: 1 ... 4094
Data VLANEnter the value for the data VLAN for the instance in the input field. Valid range: 1 ... 4094 One or more data VLANs can be configured.
Instance Status
ParameterDefaultDescription
Instance1 ... 31This field displays the instance ID.
Control VLAN1 ... 4094This field displays the controller VLAN of the instance.
Data VLAN1 ... 4094This field displays the data VLAN of the instance.
DeleteClick [Delete] to delete this setting.

9.3.9.1 Static Trunk

Wago 852-1505 - Static Trunk - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "Static Trunk."

Link Aggregation Static Trunk LACP LACP info. Static Trunk Settings Group State Group 1 Disable Load Balance MAC Member Ports Select All Deselect All 1 3 5 7 9 2 4 6 8 10 Apply Refresh Trunk Group Status Group ID State Load Balance Member Ports 1 Disable src-dst-MAC 2 Disable src-dst-MAC 3 Disable src-dst-MAC 4 Disable src-dst-MAC 5 Disable src-dst-MAC 6 Disable src-dst-MAC Member Ports: T is Trunk member port but no link, A is Trunk member and link up.

Figure 73: WBM "Link Aggregation" Page – "Static Trunk" Tab

Table 79: WBM "Link Aggregation" Page – "Static Trunk" Tab

Static Trunk Settings
ParameterDefaultDescription
Group StateGroup 1 ... Group 6Select a group ID for the “Trunk Group” (a logical link containing multiple ports) in the selection box.
DisableSelect “Disable” in the selection box to disable a static “Trunk Group.”
EnableSelect “Enable” in the selection box to use a static “Trunk Group.”
Load BalanceMACSelect “MAC” in the selection box to configure the algorithm for load balancing of a specific “Trunk Group.”
IPSelect “IP” in the selection box to configure the algorithm for load balancing of a specific “Trunk Group.”
Member PortsSelect AllNo port is selected to be added to the static “Trunk Group.”
All ports are selected to be added to the status “Trunk Group.”
Disable AllNo port is disabled.
All ports are disabled.
□ 1 ... □ 10The port is not enabled.
The port is enabled.
Trunk Group Status
ParameterDefaultDescription
Group ID1 ... 6This column displays the group ID for a “Trunk Group” (a logical link containing multiple ports).
StateDisable EnableThis column indicates whether a “Trunk Group” is enabled or disabled.
Load Balance1 ... 6This column displays the policy for load balancing of the “Trunk Group.”
Member PortsThis column displays the ports assigned to the “Trunk Group.”

9.3.9.2 LACP

Wago 852-1505 - LACP - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "LACP" (Link Aggregation Control Protocol).

Link Aggregation Static Trunk LACP LACP Info. LACP Settings State Disable System Priority 32768 Group LACP Group 1 Disable Port Priority From: - - - : Apply Refresh LACP Group Status Group ID LACP State 1 Disable 2 Disable 3 Disable 4 Disable 5 Disable 6 Disable LACP Port Priority Status Port Priority Port Priority 1 32768 2 32768 3 32768 4 32768 5 32768 6 32768 7 32768 8 32768 9 32768 10 32768

Figure 74: WBM "Link Aggregation" Page – "LACP" Tab

Table 80: WBM "Link Aggregation" Page – "LACP" Tab

LACP Settings
ParameterDefaultDescription
StateDisableSelect “Disable” in the selection box if you do not want to use the “Link Aggregation Control Protocol” (LACP).
EnableSelect “Enable” in the selection box to enable the “Link Aggregation Control Protocol” (LACP).
System Priority1 ... 65535Select the LACP system priority in the selection box. Enter a number to set the priority of an active port with “Link Aggregation Control Protocol” (LACP). The smaller the number, the higher the priority level.
Group LACPGroup 1 ... Group 6Select a “Trunk Group ID” in the selection box.
DisableSelect “Disable” in the selection box to disable LACP for this “Trunk Group ID.”
EnableSelect “Enable” in the selection box to enable LACP for this “Trunk Group.”
Port Priorityfrom:-Select a port or a range of ports in the selection box for which you want to configure the LACP priority.
to:-Select a port or a range of ports in the selection box for which you want to configure the LACP priority.
32768The default system priority is 32768.
LACP Group Status
ParameterDefaultDescription
Group ID1 ... 6This column displays the LACP group ID.
LACP StateEnable DisableThis column indicates whether LACP is enabled or disabled for a group.
LACP Port Priority Status
ParameterDefaultDescription
Port1 ... 10This column displays the port ID.
Priority1 ... 65535This column displays the LACP priority of the port.

9.3.9.3 LACP Info.

Link Aggregation Static Trunk LACP LACP info. LACP Information Group ID 1 Apply Group ID 1 Neighbor Information Port System Priority System ID Port Age Port State Port Priority Oper Key 5 - - - - - - - - - 6 - - - - - - - - - Internal Information Port Port Priority Admin Key Oper Key Port State 5 32768 5 5 0x45 6 32768 6 6 0x45 Neighbor Information: '-' means the port is link down.

Figure 75: WBM "Link Aggregation" Page – "LACP Info." Tab

Table 81: WBM "Link Aggregation" Page – "LACP Info." Tab

LACP Information
ParameterDefaultDescription
Group ID-Select an LACP group that you want to view.
Neighbor Information
ParameterDefaultDescription
Port1 ... 10This column displays the LACP ID of the subscriber port.
System Priority0 ... 65535This column displays the LACP system priority.
System IDThis column displays the system ID of the neighboring switch.
Port1 ... 10This column displays the ID of the directly connected port of the neighboring switch.
AgeThis column displays the available time period for the LACP information of the neighboring switch.
Port StateThis column displays the status of the directly connected port on the neighboring switch.
Port PriorityThis column displays the priority of the directly connected port on the neighboring switch.
Oper KeyThis column displays the “Oper Key” of the neighboring switch.
Internal Information
ParameterDefaultDescription
PortThis column displays the LACP ID of the subscriber port.
Port PriorityThe port priority of the LACP member port.
Admin KeyThis column displays the “Admin Key” of the LACP member port.
Oper KeyThis column displays the “Oper Key” of the LACP member port.
Port StatusThis column displays the port status of the LACP member port.

9.3.10 LLDP

Wago 852-1505 - LLDP - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "LLDP" (Link Layer Discovery Protocol).

9.3.10.1 Settings

LLDP Settings Neighbor LLDP Settings State Disable Tx Interval 30 seconds Tx Hold 4 times Time To Live 120 seconds Port State From: 1 From: 1 Enable Apply Refresh LLDP Status Port State Port State 1 Enable 2 Enable 3 Enable 4 Enable 5 Enable 6 Enable 7 Enable 8 Enable 9 Enable 10 Enable

Figure 76: WBM "LLDP" Page – "LLDP Settings" Tab

Table 82: WBM "LLDP" Page – "LLDP Settings" Tab

LLDP Settings
ParameterDefaultDescription
StateDisableSelect “Disable” in the selection box to disable the LLDP function globally for the switch.
EnableSelect “Enable” in the selection box to enable the LLDP function for the switch globally.
TX Interval30Enter the value for the “TX Interval” (transmission interval) for the LLDP packets in the input field.
TX Hold4Enter the value for the “TX Hold Time” in the input field that determines the TTL of the switch’s message.(TTL = tx-hold * tx-interval)
Time to Live120This field displays the lifetime for the switch’s information.
Portfrom:1Select a port or port range in the selection box for which you want to configure the “LLDP” setting.
to:1Select a port or port range in the selection box for which you want to configure the “LLDP” setting.
StatusEnableIn this selection box, select “Enable” to enable the LLDP function on individual ports.
Rx OnlySelect the “Rx Only” setting in the selection box if “Rx Interval” is always used as the transmission interval for the switch or ports.
Tx OnlySelect the “Tx Only” setting in the selection box if “Tx Interval” is always used as the transmission interval for the switch or ports.
DisableIn this selection box, select “Disable” to disable the “LLDP” function on individual ports.
LLDP Status
ParameterDefaultDescription
Port1 ... 10This column shows the port numbers.
StateDisable EnableThis column indicates whether “LLDP” is enabled or disabled.

9.3.10.2 Neighboring Detection

LLDP Settings Neighbor LLDP Neighbor Information Port All Apply Local Port 10 Remote Port ID 9 Chassis ID 00-30-de-ff-dc-fd System Name L2SWITCH System Description System Capabilities Bridge/Switch (enabled) Management Address 192.168.1.90 Time To Live 120 sec(s)

Figure 77: WBM "LLDP" Page – "Neighboring Detection" Tab

Table 83: WBM "LLDP" Page – "Neighboring Detection" Tab

LLDP Neighbor Information
ParameterDefaultDescription
PortAllSelect “All” in the selection box if you want to display information from all neighboring ports.
1 ... 10Select the port in the selection box for whose neighbor port you want to display information.
Local Port1 ... 10This field displays the port numbers.
Remote Port IDThis field displays the ID of the connected port.
Chassis IDThis field displays the neighbor port's chassis ID.
System NameThis field displays the neighbor port's system name.
System DescriptionThis field displays the neighbor port's system description.
System CapabilitiesThis field displays the system capabilities of the neighbor port.
Management AddressThis field displays the neighbor port's management address.
Time to LiveThis field displays the validity period of the information of the neighbor port.

9.3.11 Loop Detection

Wago 852-1505 - Loop Detection - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "Loop Detection."

Loop Detection

Loop Detection Settings

State

Disable ▼

MAC Address

00:0b 04:aa aa ab

Port State Action Loop Recovery Recovery Time (min) From: 1 ✓ To: 1 ✓ Disable ✓ None ✓ Enable ✓ 1 (Range: 1-60) Apply Refresh

Loop Detection Status

PortStateStatusLoop RecoveryRecovery Time (min)
1DisableNormalEnable1
2DisableNormalEnable1
3DisableNormalEnable1
4DisableNormalEnable1
5DisableNormalEnable1
6DisableNormalEnable1
7DisableNormalEnable1
8DisableNormalEnable1
9DisableNormalEnable1
10DisableNormalEnable1

Figure 78: WBM "Loop Detection" Page

Table 84: WBM "Loop Detection" Page

Loop Detection Settings
ParameterDefaultDescription
StateDisableSelect “Disable” in the selection box to disable this function.
EnableSelect “Enable” in the selection box to enable this function.
MAC AddressEnter the destination MAC address in the input field to which the probe packets should be sent. If the port receives the same packets, it is shut down.
Portfrom:1Select a port or port range in the selection box for which you want to configure the “Loop Guard Protection” settings.
to:1Select a port or port range in the selection box for which you want to configure the “Loop Guard Protection” settings.
StateDisableSelect “Disable” in the selection box to disable the “Loop Guard” function for the switch.
EnableSelect “Enable” in the selection box to enable the “Loop Guard” function for the switch.
ActionNoneSelect “None” in the selection box if you want to disable loop detection on the port.
ActivateSelect “Activate” in the selection box if you do not want to change the “Status” and “Loop Correction” functions.
Loop RecoveryEnableSelect “Enable” in the selection box to automatically re-enable the port after the designated “Recovery Time” has elapsed.
DisableSelect “Disable” in the selection box to disable this function.
Recovery Time (min) (Range: 1–60)1In the input field, enter the value for the “Recovery Time” (in minutes) that the switch waits before re-enabling the port.Time: 1 ... 60 min
Loop Detection Status
ParameterDefaultDescription
Port1 ... 10This column shows the port numbers.
StateEnable DisableThis column indicates whether the “Loop Guard” function is enabled or disabled.
StatusNone NormalThis column indicates whether a port is blocked.
Loop RecoveryEnable DisableThis column indicates whether the “Loop Recovery” function is enabled or disabled.
Recovery Time (min)1 ... 50This column displays the “Recovery Time” for the “Loop Recovery” function.

9.3.12 Jet Ring

Jet Ring Jet Ring Setting State Enable Master Bridge MAC 00:30:DE:FF:DD:16 Jet Ring Total Nodes 1 Bridge Role Learning... Apply Refresh Jet Ring Status Port Port Status Ring Port 1 Forwarding 2 No connection 3 No connection 4 No connection 5 No connection 6 No connection 7 Forwarding 8 No connection 9 No connection 10 No connection

Figure 79: WBM "Jet Ring" Page

Table 85: WBM "Jet Ring" Page

Jet Ring Settings
ParameterDefaultDescription
StateDisableIn this selection box, select “Disable” to disable the “Jet Ring” function on individual ports.
EnableIn this selection box, select “Enable” to enable the “Jet Ring” function on individual ports.
Alarm RelayDisableSelect “Disable” in the selection box to disable the alarm relay.
EnableSelect “Enable” in the selection box to enable the alarm relay.
Master Bridge MACThis field displays the IP address of the jet ring master.
Jet Ring Total NodesThis field displays the number of nodes in the jet ring.
Bridge RoleThis field displays the function of the switch in the jet ring.
Jet Ring Status
ParameterDefaultDescription
Port1 ... 10This column shows the port numbers.
Port StatusNo Connection Forwarding BlockingThis column displays the port status.
Ring PortYesThis column indicates whether the port operates in a ring.

9.3.13 MODBUS

Modbus Modbus Setting State Disable Apply Refresh

Figure 80: WBM "MODBUS" Page

Table 86: WBM "MODBUS" Page

MODBUS Settings
ParameterDefaultDescription
StateDisableIn this selection box, select “Disable” to disable the “MODBUS” function on individual ports.
EnableIn this selection box, select “Enable” to enable the “MODBUS” function on individual ports.

9.3.14 PoE

Wago 852-1505 - PoE - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "Power over Ethernet" (PoE).

9.3.14.1 Configuration

PoE Configuration Schedule PD Alive Check Power Delay PoE Settings State Enable Total Power 240 (0~240) Total Power(P) = Current of adaptor(I) * Voltage of adaptor(V) Port State Priority Max Power Limit From: 1 To: 1 Enable Low 30 (0~30) Apply Refresh Save Configurations PoE Status State Enabled Total Power (W) 240 Total Power Consumption(W) 0 Port State Status Priority Class Max Power Limit(W) Power Consumption(W) 1 Enabled Searching Low None 30 0 2 Enabled Searching Low None 30 0 3 Enabled Searching Low None 30 0 4 Enabled Searching Low None 30 0 5 Enabled Searching Low None 30 0 6 Enabled Searching Low None 30 0 7 Enabled Searching Low None 30 0 8 Enabled Searching Low None 30 0

Figure 81: WBM "PoE" Page – "Configuration" Tab

Table 87: WBM "PoE" Page – "Configuration" Tab

PoE Settings
ParameterDefaultDescription
StateEnableSelect “Enable” in the selection box to enable the “PoE” function.
DisableSelect “Disable” in the selection box to disable the “PoE” function.
Total Power (0–240)240Enter the total power of the switch in the input field.
Portfrom:1Select a port or port range in the selection box for which you want to configure the “PoE” setting.
to:1Select a port or port range in the selection box for which you want to configure the “PoE” setting.
StateEnableIn this selection box, select “Enable” to enable the “PoE” function on individual ports.
DisableIn this selection box, select “Disable” to disable the “PoE” function on individual ports.
PriorityLowHighCriticalSelect the PoE priority for the selected port or range of ports in the selection box.
Max. Power Limit (0–30)30Enter the power limit for the selected port in the input field.
PoE Status
ParameterDefaultDescription
StateEnableDisableThis field displays the status of the “PoE” function.
Total Power (W)0 ... 240This field displays the total power that the switch supports.
Total Power Consumption (W)0 ... 240This field displays the total power consumption of all PD (“Powered Device”) subscribers.
Port1 ... 8This field displays the port number.
StateEnableDisableThis field displays the “PoE” state for the specific port.
StatusThis field displays the status of the “PoE” function.
PriorityLowHighCriticalThis field displays the “PoE” priority for the specific port.
ClassThe field displays the class mode for the specific port which the PSE (“Power Sourcing Equipment”) device has negotiated with the “PD” (“Powered Device”) subscriber.
Max. Power Limit (W)0 ... 30This field displays the power limit for the specific port.
Power Consumption (W)0 ... 240This field displays the power consumption for the specific port.

9.3.14.2 Schedule

PoE Configuration Schedule PD Alive Check Power Delay Schedule Setting Port 1 √ State Disable √ Week Check Action Time (hour) Monday √ No √ Enable √ From: 0 √ To: 24 √ Apply Refresh Save Configurations PoE Status Port 1 State Disabled Crrrent Time Wednesday 4:23:10 Week Check Action Start Time (hour) End Time (hour) Monday No Enable 0 24 Tuesday No Enable 0 24 Wednesday No Enable 0 24 Thursday No Enable 0 24 Friday No Enable 0 24 Saturday No Enable 0 24 Sunday No Enable 0 24

Figure 82: WBM "PoE" Page – "Schedule" Tab

Table 88: WBM "PoE" Page – "Schedule" Tab

Schedule Settings
ParameterDefaultDescription
Port1 ... 8In this selection box, select a port for which you want to configure the “PoE” schedule function.
AllSelect “All” in the selection box if you want to configure the “PoE” schedule function for all ports.
StateDisableSelect “Disable” in the selection box to disable the “PoE” schedule function.
EnableSelect “Disable” in the selection box to enable the “PoE” schedule function.
WeekMondayTuesdayWednesdayThursdayFridaySaturdaySundayIn this selection box, select the day of the week for which you want to configure the schedule.
AllSelect “All” in the selection box if you want to configure the schedule for all days of the week.
CheckYesSelect “Yes” in the selection box to check the “PoE” schedule on the specific port for a defined time period.
NoSelect “Yes” in the selection box in order not to check the “PoE” schedule on the specific port for a defined time period.
ActionEnableSelect “Enable” in the selection box to enable the “PoE” schedule on the specific port for a defined time period.
DisableSelect “Yes” in the selection box to disable the “PoE” schedule on the specific port for a defined time period.
Time (Hour)from:0 ... 24In the selection box, select a start time (hour) of the “PoE” schedule on a specific day of the week for the specific port.
to:0 ... 24In the selection box, select an end time (hour) of the “PoE” schedule on a specific day of the week for the specific port.

Table 88: WBM "PoE" Page – "Schedule" Tab

PoE Status
ParameterDefaultDescription
Port1 ... 8AllThis field displays the port number.
StateEnableDisableThis field displays the status of the “PoE” schedule function.
Current TimeThis field displays the current time.
WeekMondayTuesdayWednesdayThursdayFridaySaturdaySundayThis column displays the specific day of the week.
CheckYesNoThis column displays the status of the check of the “PoE” schedule.
ActionEnableDisableThis column displays the status of the “PoE” schedule for the defined time period and the specific port.
Start Time (Hour)0 ... 24This column displays the start time of the “PoE” schedule on a specific day of the week for the specific port.
End Time (hour)This column displays the end time of the “PoE” schedule on a specific day of the week for the specific port.

9.3.14.3 PD Alive Check

PoE Configuration Configuration Schedule PD Alive Check Power Delay PD Alive Check Settings State Disable Port State IP Address Interval (sec) Retry Times Action Power Off Time (sec) Start up Time (sec) From: 1 To: 1 Disable 0.0.0.0 30 2 All 15 60 Apply Refresh Save Configurations PD Alive Check Status Port State IP Address Interval (sec) Retry Times Action Power Off Time (sec) Start up Time (sec) 1 Disabled 0.0.0.0 30 2 All 15 60 2 Disabled 0.0.0.0 30 2 All 15 60 3 Disabled 0.0.0.0 30 2 All 15 60 4 Disabled 0.0.0.0 30 2 All 15 60 5 Disabled 0.0.0.0 30 2 All 15 60 6 Disabled 0.0.0.0 30 2 All 15 60 7 Disabled 0.0.0.0 30 2 All 15 60 8 Disabled 0.0.0.0 30 2 All 15 60

Figure 83: WBM "PoE" Page – "PD Alive Check" Tab

Table 89: WBM "PoE" Page – "PD Alive Check" Tab

PD Alive Check Settings
ParameterDefaultDescription
StateDisableSelect “Disable” in the selection box to disable the “PD Alive Check” function.
EnableSelect “Enable” in the selection box to enable the “PD Alive Check” function.
Portfrom:1Select a port or port range in the selection box for which you want to configure the “PD Alive Check” setting.
to:1Select a port or port range in the selection box for which you want to configure the “PD Alive Check” setting.
StatusDisableIn this selection box, select “Disable” to disable the “PD Alive Check” function on individual ports.
EnableIn this selection box, select “Enable” to disable the “PD Alive Check” function on individual ports.
IP AddressIn the input field, enter the host IP address to which the port connects.
Interval (sec)30In the input field, enter the interval for sending the packet probes to check if the host is still alive.
Retry Time2In the input field, enter the number of retries for sending packet probes to check whether the host is still alive. A precondition for this is that the host does not respond.
ActionAllIn the selection box, select “All” in order to send an alarm message to the administrator and reboot the PD (“Powered Device”) subscriber.
NoneIn the selection box, select “None” if the PD (“Powered Device”) subscriber constantly pings without executing further actions.
RestartIn the selection box, select “Restart” in order to disconnect the PoE port from the power supply and reboot the PD (“Powered Device”) subscriber.
AlarmIn the selection box, select “Alarm” in order to send an alarm message to the administrator.
Power-off Time (sec)15In the input field, enter the amount of time after which the PoE port should be reconnected to the power supply after a restart of the PD (“Powered Device”) subscriber.
Startup Time (sec)15In the input field, enter the amount of time that the switch should wait after a restart of the PD (“Powered Device”) subscriber before performing the automatic PoE check.

Table 89: WBM "PoE" Page – "PD Alive Check" Tab

PD Alive Check Status
ParameterDefaultDescription
Port1 ... 8This column displays the port number.
StateEnable DisableThis column displays the PD Alive Check" status for the specific port.
IP AddressThis column displays the host IP address of the specific port.
Interval (sec)10 ... 120This column displays the interval at which check messages are sent to the PD ("Powered Device") subscriber.
Retry TimeThis column displays the number of retries for sending packet probes to check whether the host is still alive if the host for the specific port has not responded to a packet.
ActionAll None Restart AlarmThis column displays the selected action.
Power-off Time (sec)3 ... 120This column displays the "Power-off Time."
Startup Time (sec)30 ... 600This column displays the "Startup Time."

9.3.14.4 Power Delay (Switch-on Delay)

PoE Configuration Schedule PD Alive Check Power Delay Power Delay Settings Port State Time(sec) From: 1 To: 1 Disable 0 Apply Refresh Save Configurations Power Delay Status Port State Time(sec) 1 Disabled 0 2 Disabled 0 3 Disabled 0 4 Disabled 0 5 Disabled 0 6 Disabled 0 7 Disabled 0 8 Disabled 0

Figure 84: WBM "PoE" Page – "Power Delay" Tab

Table 90: WBM "PoE" Page – "Power Delay" Tab

Power Delay Settings
ParameterDefaultDescription
Portfrom:1Select a port or port range in the selection box for which you want to configure the “Power Delay” setting.
to:1Select a port or port range in the selection box for which you want to configure the “Power Delay” setting.
StateDisableIn this selection box, select “Power Delay” to disable the “PoE” function on individual ports.
EnableIn this selection box, select “Enable” to disable the “PoE” function on individual ports.
Time (sec)In the input field, enter the time delay for the specific ports.
Power Delay Status
ParameterDefaultDescription
Port1 ... 8This column displays the port number.
StateEnable DisableThis column displays the “PoE” power delay state for the port.
Time (sec)This column displays the time for the “PoE” power delay.

Wago 852-1505 - Power Delay (Switch-on Delay) - 2

Note

Power delay value

The high priority port should be given a low value for the power delay.

9.3.15 Spanning Tree Protocol

Wago 852-1505 - Spanning Tree Protocol - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "Spanning Tree Protocol" (STP).

9.3.15.1 General Settings

Spanning Tree Protocol General Settings Port Parameters STP Status Spanning Tree Protocol Settings State Disable Mode RSTP Bridge Parameters Forward Delay 15 (Range:4-30) Max Age 20 (Range:6-40) Relationships: 2*(Forward Delay-1) >= Max Age Max Age > 2*(Hello Time+1) Hello Time 2 (Range:1-10) Priority 32768 (Range:0-61440) Pathcost Method Short Apply Refresh

Figure 85: WBM "Spanning Tree Protocol" Page – "General Settings" Tab

Table 91: WBM "Spanning Tree Protocol" Page – "General Settings" Tab

Spanning Tree Protocol Settings
ParameterDefaultDescription
StateDisableSelect “Disable” in the selection box to disable this function.
EnableSelect “Enable” in the selection box to use the “Spanning Tree Protocol” (STP) or “Rapid Spanning Tree Protocol” (RSTP).
ModeRSTPSelect “RSTP” in the selection box if you want to use the faster “Rapid Spanning Tree Protocol.”
MSTPSelect “MSTP” in the selection box if you want to use the “Multiple Spanning Tree Protocol.”
STPSelect “STP” in the selection box if you want to use the “Spanning Tree Protocol.”
Bridge Parameters
ParameterDefaultDescription
Forward Delay15Enter the “Forward Delay” time in the input field. Valid range: 4 ... 30 s
Max Age20Enter the “Max Age” time in the input field. Valid range: 6 ... 40 s
Hello Time2Enter the “Hello Time” in the input field. Valid range: 1 ... 10 s
Priority32768Enter a value for the priority in the input field. The lower the numerical value you assign, the higher the priority of this bridge is. Valid range: 0 ... 61440
Path Cost MethodShortSelect “Short” in the selection box if you want to select a size of 16 bits and a transmission rate of up to 10 Gbit. 10 Mbit = 100 100 Mbit = 19 1 Gbit = 4 10 Gbit = 2
LongSelect “Long” in the selection box if you want to select a size of 32 bits and a transmission rate of up to 10 Tbit. 10 Mbit = 2000000 100 Mbit = 200000 1 Gbit = 20000 10 Gbit = 2000 100 Gbit = 200 1 Tbit = 20

9.3.15.2 Port Parameters

Spanning Tree Protocol General Settings Port Parameters STP Status Port Parameters Settings Port Active Path Priority Edge Port BPDU Filter BPDU Guard ROOT Guard From: 1 To: 1 Enable 250 128 Disable Disable Disable Disable Apply Refresh Port Status Port Active Role Status Way Cost Priority Edge Port BPDU Filter BPDU Guard ROOT Guard 1 Enable None Discarding 250 128 Disable Disable Disable Disable 2 Enable None Discarding 250 128 Disable Disable Disable Disable 3 Enable None Discarding 250 128 Disable Disable Disable Disable 4 Enable None Discarding 250 128 Disable Disable Disable Disable 5 Enable None Discarding 250 128 Disable Disable Disable Disable 6 Enable None Discarding 250 128 Disable Disable Disable Disable 7 Enable None Discarding 250 128 Disable Disable Disable Disable 8 Enable None Discarding 250 128 Disable Disable Disable Disable 9 Enable None Discarding 250 128 Disable Disable Disable Disable 10 Enable None Discarding 250 128 Disable Disable Disable Disable

Figure 86: WBM "Spanning Tree Protocol" Page – "Port Parameters" Tab

Table 92: WBM "Spanning Tree Protocol" Page – "Port Parameters" Tab

Port Parameter Settings
ParameterDefaultDescription
PortFrom:1Select a port or port range in the selection box to configure the “STP Function.”
To:1Select a port or port range in the selection box to configure the “STP Function.”
ActiveEnableSelect “Enable” in the selection box if you want to enable the “STP” function for the specific port.
DisableSelect “Disable” in the selection box if you want to disable the STP function for the specific port.
Path Costs250Enter the value for the path costs for the specific port in the input field.
Priority128Enter the value for the priority for the specific port in the input field.
Edge PortDisableSelect “Disable” in the selection box to disable the “Edge Port” port type for the specific port.
EnableSelect “Enable” in the selection box to enable the “Edge Port” port type for the specific port.
BPDU FilterDisableSelect “Disable” in the selection box to disable the BPDU filter function for the specific port.
EnableSelect “Enable” in the selection box to enable the BPDU filter function for the specific port.
BPDU GuardDisableSelect “Disable” in the selection box to disable the “BPDU Guard” function for the specific port.
EnableSelect “Enable” in the selection box to enable the “BPDU Guard” function for the specific port.
ROOT GuardDisableSelect “Disable” in the selection box to disable the “ROOT Guard” function for the specific port.
EnableSelect “Enable” in the selection box to enable the “ROOT Guard” function for the specific port.

Table 92: WBM "Spanning Tree Protocol" Page – "Port Parameters" Tab

Port Status
ParameterDefaultDescription
Port1 ... 10This column shows the port numbers.
ActiveEnableDisableThis column displays the status of the “STP” function.
RoleAlternated Designated Root Backup NoneThis column displays the role of the port.
StatusDiscarding Blocking Listening Learning Forwarding DisabledThis column displays the port status.
Path Costs0 ... 65535This column displays the path cost of the port.
Priority0 ... 61440This column displays the port priority.
Edge PortDisable EnableThis column displays the status of the “Edge Port” function.
BPDU FilterDisable EnableThis column displays the status of the BPDU filter function.
BPDU GuardDisable EnableThis column displays the status of the “BPDU Guard” function.
ROOT GuardDisable EnableThis column displays the status of the “Root Guard” function.

9.3.15.3 STP Status

Wago 852-1505 - STP Status - 1

flowchart
graph TD
    A["General Settings"] --> B["Port Parameters"]
    B --> C["STP Status"]
    D["Current Root Status"] --> E["MAC Address"]
    E --> F["Priority"]
    F --> G["Max Age"]
    G --> H["Hello Time"]
    H --> I["Forward Delay"]
    J["Current Bridge Status"] --> K["MAC Address"]
    K --> L["Priority"]
    L --> M["Max Age"]
    M --> N["Hello Time"]
    N --> O["Forward Delay"]
    O --> P["Path Cost"]
    P --> Q["Root Port"]
    R["Refresh"] --> K

Figure 87: WBM "Spanning Tree Protocol" Page – "STP Status" Tab

Table 93: WBM "STP" Page – "STP Status" Tab

Current Root Status
ParameterDefaultDescription
MAC AddressThis field displays the MAC address of the “Root Bridge.”
PriorityThis field displays the priority of the “Root Bridge.” This switch can also be the “Root Bridge.”
Max AgeThis field displays the “Max Age” of the “Root Bridge.”
Hello TimeThis field displays the “Hello Time” of the “Root Bridge.” The “Root Bridge” determines the “Hello Time,” “Max Age and “Forwarding Delay.”
Forward DelayThis field displays the maximum time (in seconds) that the root switch waits before changing states.
Current Bridge Status
ParameterDefaultDescription
MAC AddressThis field displays the MAC address of the current bridge.
PriorityThis field displays the priority.
Max AgeThis field displays the “Max Age.”
Hello TimeThis field displays the “Hello Time.”
Forward DelayThis field displays the “Forward Time.”
Path CostsThis field displays the path cost.
ROOT PortThis field displays the number of the port on the switch through which the switch has to communicate with the root of the “Spanning Tree.”

9.3.16 Xpress Ring

Wago 852-1505 - Xpress Ring - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "Xpress Ring."

Xpress Ring

Xpress Ring Settings

Global State: Disabled
Ring1Ring2
StateDisabledDisabled
Destination MAC (Last byte)f0f1
RoleForwarderForwarder
Primary PortNoneNone
Secondary PortNoneNone

Xpress Ring Status

Ring1Ring2
StateDisabledDisabled
Destination MAC01:80:c2:ff:ff:f001:80:c2:ff:ff:f1
RoleForwarderForwarder
Primary PortN/A (No connection)N/A (No connection)
Secondary PortN/A (No connection)N/A (No connection)

Figure 88: WBM "Xpress Ring" Page

Table 94: WBM "Xpress Ring" Page

Xpress Ring Settings
ParameterDefaultDescription
Global StateDisableSelect “Disable” in the selection box to disable the “Xpress Ring” function.
EnableSelect “Enable” in the selection box to enable the “Xpress Ring” function.
Ring 1This column can be used to configure ring 1.
Ring 2This column can be used to configure ring 2.
StateDisableSelect “Disable” in the selection box to disable the “Xpress Ring” function for the respective ring.
EnableSelect “Enable” in the selection box to enable the “Xpress Ring” function for the respective ring.
Destination MAC (last byte)Enter the MAC address of the respective ring in the input field.
RoleForwarderSelect the “Forwarder” role for the switch in the selection box.
ArbiterSelect the “Arbiter” role for the switch in the selection box.
Primary PortNoneSelect “None” in the selection box if you do not want to enable a primary port in the ring.
1 ... 10Select the respective primary port in the selection box.
Secondary PortNoneSelect “None” in the selection box if you do not want to enable a secondary port in the ring.
1 ... 10Select the respective secondary port in the selection box.
Xpress Ring Status
ParameterDefaultDescription
StateDisable EnableThis field displays the current status of the Xpress ring.
Ring 1This column displays the configurations for ring 1.
Ring 2This column displays the configurations for ring 2.
Destination MACThis field displays the last byte of the respective MAC address of the Xpress ring.
RoleForwarder ArbiterThis field displays the role of switch.
Primary PortN/A (No Connection)0 ... 10(Forwarding, Blocking)This field displays the status of the primary port.
Secondary PortN/A (No Connection)0 ... 10(Forwarding, Blocking)This field displays the status of the secondary port.

9.4 Security

9.4.1 IP Source Guard

Wago 852-1505 - IP Source Guard - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "IP Source Guard."

Additional information

Please refer to the section "Function Description" for more information on "DHCP Snooping" (Dynamic Host Configuration Protocol).

Figure 89: WBM "DHCP Snooping" Page – "DHCP Snooping" Tab

Table 95: WBM "DHCP Snooping" Page – "DHCP Snooping" Tab

DHCP Snooping Settings
ParameterDefaultDescription
StateDisableSelect “Disable” in the selection box if you do not want to use this function.
EnableSelect “Enable” in the selection box to enable the “DHCP Snooping.”You must then enable this function for specific VLANs and configure “Trusted Ports.”
Wago 852-1505 - Additional information - 1NoteConfiguring DHCP requestsThe switch drops all DHCP requests when “DHCP Snooping” is enabled and there are no “Trusted Ports.”Select “Disable” if you do not want to use this function.
VLAN StateAddSelect “Add” in the selection box and enter the VLANs for which “DHCP Snooping” should be enabled.Valid range of VLAN IDs: 1 ... 4094.Use a comma (,) or hyphen (-) to specify individual VLANs or VLAN ranges.
DeleteSelect “Delete” in the selection box and enter the VLANs for which “DHCP Snooping” should be disabled.
DHCP Snooping Status
ParameterDefaultDescription
DHCP Snooping StateDisable EnableThis field indicates whether “DHCP Snooping” is enabled or disabled.
Enabled for VLANNone1 ... 4094This field displays the VLANs in which the “DHCP Snooping” function is enabled.“None” is displayed if no VLANs have been specified.

9.4.1.1.2 Port Settings

DHCP Snooping DHCP Snooping Port Settings Server Screening Port Settings Port From: 1 ✓ To: 1 ✓ Trust No ✓ Maximum Host Count 32 (Range: 1-32) Apply Refresh Port Status Port Trust Maximum Host Count Port Trust Maximum Host Count 1 No 32 2 No 32 3 No 32 4 No 32 5 No 32 6 No 32 7 No 32 8 No 32 9 No 32 10 No 32

Figure 90: WBM "DHCP Snooping" Page – "Port Settings" Tab

Table 96: WBM "DHCP Snooping" Page – "Port Settings" Tab

Port Settings
ParameterDefaultDescription
Portfrom:1Select a port or port range in the selection box for which you want to specify the maximum number of hosts.
to:1Select a port or port range in the selection box for which you want to specify the maximum number of hosts.
TrustNoSelect “No” in the selection box if the specific port should not be a “Trusted Port.”
YesSelect “Yes” in the selection box if the specific port should be a “Trusted Port.”
Maximum Host Count (range: 1–32)32In the input field, enter the maximum number of hosts that can be connected to a port at the same time. Valid range: 1 ... 32
Port Status
ParameterDefaultDescription
Port1 ... 10This column shows the port numbers.
TrustNone YesThis column displays the status of the “Trusted Ports.”
Maximum Host CountThis column displays the maximum number of hosts that can be connected to a port at the same time.

9.4.1.1.3 Server Screening

Wago 852-1505 - Server Screening - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "Server Screening."

DHCP Snooping DHCP Snooping Port Settings Server Screening Server Screening Setting IP Address Apply Refresh Server Screening List No. IP Address Action

Figure 91: WBM "DHCP Snooping" Page – "Server Screening" Tab

Table 97: WBM "DHCP Snooping" Page – "Server Screening" Tab

Server Screening Settings
ParameterDefaultDescription
IP AddressEnter the IP address of a valid DHCP server in the input field.
Server Screening List
ParameterDefaultDescription
No.This column displays the index number of the DHCP server entry. Click the number to modify the entry.
IP AddressThis column displays the IP address of the DHCP server.
ActionClick [Delete] to delete a specific entry.

9.4.1.2 DHCP Snooping Binding Table

Wago 852-1505 - DHCP Snooping Binding Table - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "DHCP Snooping Binding Table."

9.4.1.2.1 Static Entry

DHCP Snooping Binding Table Static Entry Settings Binding Table Static Entry Settings MAC Address IP Address VLAN ID Port 1 Apply Refresh Static Binding Table No. MAC Address IP Address Lease(hour) VLAN Port Type Action

Figure 92: WBM "DHCP Snooping Binding Table" Page – "Static Entry" Tab

Table 98: WBM "DHCP Snooping Binding Table" Page – "Static Entry" Tab

Static Entry Settings
ParameterDefaultDescription
MAC AddressEnter the MAC source address for the binding in the input field.
IP AddressEnter the IP address assigned to the MAC source address for the binding in the input field.
VLAN IDEnter the source VLAN ID for the binding in the input field.
Port1 ... 10Select the physical port of the binding in the selection box.
Static Binding Table
ParameterDefaultDescription
No.1 ... 10This column displays the sequential numbers for each binding. Click on it to update the existing entries.
MAC AddressThis column displays the MAC address for the binding.
IP AddressThis column displays the IP address assigned to the source MAC address for the binding.
Lease (Hour)This column indicates how long the binding is valid.
VLANThis column displays the source VLAN ID for the binding.
Port1 ... 10This column displays the port number for the binding.
TypeStatic DynamicThis column indicates how the binding was communicated to the switch."Static": This binding was manually entered by an administrator."Dynamic": This binding was entered through information from "DHCP Snooping."
ActionClick [Delete] to delete a specific entry.

9.4.1.2.2 Binding Table

DHCP Snooping Binding Table Static Entry Settings Binding Table DHCP Snooping Binding Table Show Type All Show *You can select the dynamic entry and convert it to static status. *All MAC Address IP Address Lease(hour) VLAN Port Type Apply Refresh

Figure 93: WBM "DHCP Snooping Binding Table" Page – "Binding Table" Tab

Table 99: WBM "DHCP Snooping Binding Table" Page – "Binding Table" Tab

DHCP Snooping Binding Table
ParameterDefaultDescription
Show TypeAllSelect “All” in the selection box if you want to display all binding table entries.
DynamicSelect “Dynamic” in the selection box if you want to display the dynamic binding table entries.
StaticSelect “Static” in the selection box if you want to display the static binding table entries.
ParameterDefaultDescription
All1 ... 10This column displays the sequential numbers for each binding. Click on it to update the existing entries.
MAC AddressThis column displays the MAC address for the binding.
IP AddressThis column displays the IP address assigned to the source MAC address for the binding.
Lease (Hour)This column indicates how long the binding is valid.
VLANThis column displays the source VLAN ID for the binding.
PortThis column displays the port number for the binding. If this field is empty, the binding applied to all ports.
TypeStatic DynamicThis column indicates how the binding was communicated to the switch.“Static”: This binding was manually entered by an administrator.“Dynamic”: This binding was entered through information from “DHCP Snooping.”

Additional information

Please refer to the section "Function Description" for more information on ARP inspection" ("Address Resolution Protocol inspection").

Figure 94: WBM "ARP Inspection" Page – "ARP Inspection" Tab

Table 100: WBM "ARP Inspection" Page – "ARP Inspection" Tab

ARP Inspection Settings
ParameterDefaultDescription
StateDisableSelect "Disable" in the selection box if you want to disable ARP inspection on the switch.
EnableSelect "Enable" in the selection box if you want to enable ARP inspection on the switch.
VLAN StateAddSelect "Add" in the selection box and enter the VLANs for which "ARP Inspection" should be enabled on the switch. Valid range of VLAN IDs: 1 ... 4094. Use a comma (,) or hyphen (-) to specify individual VLANs or VLAN ranges.
DeleteSelect "Delete" in the selection box and enter the VLANs on which the switch should not run "ARP Inspection."
Trusted PortsSelect the ports that you want to select or deselect as "Trusted Ports." The switch does not drop ARP packets from "Trusted Ports" for any reason. The switch discards DHCP packets from "Untrusted Ports" in the following situations: • The sender information in an ARP packet does not match any current bindings. • The transmission rate of the DHCP packets received is too high. You can specify the maximum rate for receiving packets on "Untrusted Ports."
Select AllNo port is selected as "Trusted."
All ports are selected as "Trusted."
Cancel SelectionNo port is disabled as "Trusted."
All ports are disabled as "Trusted."
□ 1 ... □ 10The port is not enabled.
The port is enabled.
ARP Inspection Status
ParameterDefaultDescription
ARP Inspection StateDisable EnableThis field displays the current status of the ARP inspection.
Enabled on VLANNone 1 ... 10This field displays the VLAN IDs for which ARP inspection is enabled.
Trusted PortsNone 1 ... 10This field displays the ports specified as "Trusted Ports."

Additional information

Please refer to the section "Function Description" for more information on the "Filter Table."

ARP Inspection ARP Inspection Filter Table Filter Age Time Settings Filter Age Time 5 minutes (Range: 1-10080) Apply Refresh Filter Table No. MAC Address VLAN Port Expiry(min)ilio Action Total: 0 record(s)

Figure 95: WBM "ARP Inspection" Page – "Filter Table" Tab

Table 101: WBM "ARP Inspection" Page – "Filter Table" Tab

Filter Age Time Settings
ParameterDefaultDescription
Filter Age Time min (Range: 1–10080)5Enter a time in the input field for how long a MAC address filter entry should remain in the switch after the switch has received an unauthorized ARP packet.Time: 1 ... 10,080 minOnce this time has elapsed, the switch deletes the entry automatically.This setting has no effect on existing MAC address filters.
Filter Table
ParameterDefaultDescription
No.This column displays the sequential number of each MAC address filter entry.
MAC AddressThis column displays the source MAC addresses in the MAC address filter.
VLANThis column displays the source VLAN IDs in the MAC address filter.
PortThis field displays the source port of the discarded ARP packets.
Expiry Time (min)This column indicates how long (in minutes) a MAC address filter entry remains in the switch.
ActionClick [Delete] to delete a specific entry.
QuantityThis field displays the total number of current MAC address filter entries that the switch created due to identified unauthorized ARP packets.

9.4.2 Access Control List

Wago 852-1505 - Access Control List - 1

Note

Additional information

Please refer to the section "Function Description" for more information on the "Access Control List."

Access Control List

Access Control List Settings

Profile Name

Ethernet Type

Source MAC

Destination MAC

DSCP

Source IP

Destination IP

IP Protocol

Source Application

Destination Application

Source Interface

Wago 852-1505 - Access Control List Settings - 1

Wago 852-1505 - Access Control List Settings - 2

Wago 852-1505 - Access Control List Settings - 3

Wago 852-1505 - Access Control List Settings - 4

Wago 852-1505 - Access Control List Settings - 5

Wago 852-1505 - Access Control List Settings - 6

Wago 852-1505 - Access Control List Settings - 7

Wago 852-1505 - Access Control List Settings - 8

Wago 852-1505 - Access Control List Settings - 9

Wago 852-1505 - Access Control List Settings - 10

Wago 852-1505 - Access Control List Settings - 11

Wago 852-1505 - Access Control List Settings - 12

Wago 852-1505 - Access Control List Settings - 13

Wago 852-1505 - Access Control List Settings - 14

Wago 852-1505 - Access Control List Settings - 15

Wago 852-1505 - Access Control List Settings - 16

Wago 852-1505 - Access Control List Settings - 17

Wago 852-1505 - Access Control List Settings - 18

Wago 852-1505 - Access Control List Settings - 19

Wago 852-1505 - Access Control List Settings - 20

Wago 852-1505 - Access Control List Settings - 21

Wago 852-1505 - Access Control List Settings - 22

Apply

Action

VLAN

Mask of Source MAC

Mask of Destination MAC

Mask of Source IP

Mask of Destination IP

Wago 852-1505 - Access Control List Settings - 23

Wago 852-1505 - Access Control List Settings - 24

Wago 852-1505 - Access Control List Settings - 25

Wago 852-1505 - Access Control List Settings - 26

Wago 852-1505 - Access Control List Settings - 27

Access Control List Status

Profile Name521582ActionDisable
Ethernet TypeAnyVLANAny
IP ProtocolAny
Source MACAnyMask of Source MACNone
Destination MACAnyMask of Destination MACNone
DSCPAny
IP ProtocolAny
Source IPAnyMask of Source IPNone
Destination IPAnyMask of Destination IPNone
Source ApplicationAnyDestination ApplicationAny
Source Application10
Delete

Figure 96: WBM "Access Control List" Page

Table 102: WBM "Access Control List" Page

Access Control List Settings
ParameterDefaultDescription
IP TypeIPv4Select “IPv4” in the selection field if you want to select this version of the Internet protocol.
IPv6Select “IPv6” in the selection box if you want to select this version of the Internet protocol.
Profile NameEnter the name of the profile in the input field.
ActionDisableSelect “Disable” in the selection box to disable access control.
PermissionSelect “Permission” in the selection box to forward data packets that match the information.
DiscardSelect “Discard” in the selection box to drop data packets that match the information.
DSCPSelect “DSCP” in the selection box to give a new priority value to data packets that match the information. (only with IPv4)
ETHERNET Type(only with IPv4)AnySelect “Any” in the selection box to make every ETHERNET type valid.
OtherSelect “Other” in the selection box to specify an ETHERNET type for which access control is valid.
VLANAnySelect “any” in the selection box to make every VLAN ID valid.
OtherSelect “Other” in the selection box to enter a specific VLAN ID in the access control list.
Source MAC Address(only with IPv4)AnySelect “Any” in the selection box to make every MAC address valid.
OtherSelect “Other” in the selection box to enter the MAC address for the source in the access control list.
Mask of the Source MAC Address(only with IPv4)In the input field, enter the source MAC ID of the bitmap mask for source MAC addresses of packets to be filtered.If you selected “Source MAC Address” in the selection box, this field remains empty. The profile then only filters the MAC address entered in the source MAC address field.
Destination MAC Address(only with IPv4)AnySelect “Any” in the selection box to make every MAC address valid.
OtherSelect “Other” in the selection box to enter the MAC address for the destination in the access control list.
Mask of the Destination MAC Address(only with IPv4)In the input field, enter the destination MAC ID of the bitmap mask for destination MAC addresses of packets to be filtered.If you selected “Destination MAC Address” in the selection box, this field remains empty. The profile then only filters the MAC address entered in the destination MAC address field.

Table 102: WBM "Access Control List" Page

DSCP(only with IPv4)AnySelect “Any” in the selection box to make every DSCP priority valid for the access control list.
Other0 ... 63Select the DSCP priority in the selection box.
Source IPAnySelect “Any” in the selection box to make every IP address valid.
OtherSelect “Other” in the selection box to enter the IP address for the source in the access control list.
Mask of the Source IP AddressIn the input field, enter the source IP address ID of the bitmap mask for source IP addresses of packets to be filtered.If you selected “Source IP” in the selection box, this field remains empty. The profile then only filters the IP address entered in the source IP address field.
Destination IPAnySelect “Any” in the selection box to make every IP address valid.
OtherSelect “Other” in the selection box to enter the IP address for the destination in the access control list.
Mask of the Destination IP Address(only with IPv4)In the input field, enter the destination IP address of the bitmap mask for IP destination MAC addresses of packets to be filtered.If you selected “Destination MAC Address” in the selection box, this field remains empty. The profile then only filters the IP address entered in the destination IP address field.
IP ProtocolAnySelect “Any” in the selection box to make every IP protocol for the access control list valid.
OtherEnter “Other” in the selection box to enter the protocol.
Source ApplicationAnySelect “Any” in the selection box to make every application valid.
OtherSelect “Other” in the selection box to enter the source port (e.g., 2234).
Destination ApplicationAnySelect “Any” in the selection box to make every destination application valid.
OtherSelect “Other” in the selection box to enter the port (e.g., 502) for the destination in the access control list.
Source InterfaceAnySelect “Any” in the selection box if every physical port is valid.
Other1 ... 10Enter the physical port in the input field for which this entry is valid in the access control list.

Table 102: WBM "Access Control List" Page

Access Control List Status
ParametersDefaultDescription
IP TypeIPv4IPv6This field displays the selected IP type.
Profile NameThis field displays the selected name of the profile.
ActionDisablePermissionDiscardDSCPThis field displays the status of the access control.(DSCP only with IPv4)
ETHERNET Type(only with IPv4)AnyOtherThis field displays the ETHERNET type.
VLANAnyOtherThis field displays the VLAN ID.
Source MAC Address(only with IPv4)AnyOtherThis field displays the source MAC address.
Mask of the Source MAC Address(only with IPv4)This field displays the source MAC ID of the bitmap mask.
Destination MAC Address(only with IPv4)AnyOtherThis field displays the destination MAC address.
Mask of the Destination MAC Address(only with IPv4)This field displays the destination MAC ID of the bitmap mask.
DSCP(only with IPv4)AnyOtherThis field displays the DSCP priority.
IP ProtocolAnyOtherThis field displays the IP protocol.
Source IPAnyOtherThis field displays the source IP.
Mask of the Source IP AddressThis field displays the source MAC ID of the bitmap mask.
Destination IPAnyOtherThis field displays the destination IP.
Mask of the Destination IP Address(only with IPv4)This field displays the destination IP ID of the bitmap mask.
Source ApplicationAnyOtherThis field displays the source application.
Destination ApplicationAnyOtherThis field displays the destination application.
Source Interface1 ... 10This field displays the source interface.

9.4.3 IEEE 802.1X

Wago 852-1505 - IEEE 802.1X - 1

Note

Additional information

Please refer to the section "Function Description" for more information on the "IEEE 802.1X" standard.

9.4.3.1 Global Settings

802.1x Global Settings Port Settings Global Settings State Disable Authentication Method Local Guest VLAN 0 Primary Radius Server IP : Secondary Radius Server IP : Authentication Method None User Name : Password : Apply Refresh Global Status State Disable Authentication Method Local Guest VLAN 0 Primary Radius Server IP : - UDP Port : - Shared Key : - Secondary Radius Server IP : - UDP Port : - Shared Key : - Local Authentic User admin,

Figure 97: WBM "IEEE 802.1X" Page – "Global Settings" Tab

Table 103: WBM "IEEE 802.1X" Page – "Global Settings" Tab

Global Settings
ParameterDefaultDescription
StateDisableSelect “Disable” in the selection box to disable IEEE 802.1X authentication on the switch.
EnableSelect “Enable” in the selection box to enable IEEE 802.1X authentication on the switch.
Wago 852-1505 - Global Settings - 2 Wago 852-1505 - Global Settings - 3IEEE 802.1X AuthenticationYou must first enable IEEE 802.1X authentication on the switch before you can configure this function for individual ports.
Authentication MethodLocalSelect “Local” in the selection box to use the “Guest” and “User” user groups from the user account database on the switch for authentication.However, the number of nodes that can exist at the same time is limited.
RADIUSSelect “RADIUS” in the selection box to enable the security protocol that uses an external server for user authentication, in contrast to the internal user database, in devices with limited storage.In general, “RADIUS” allows validation of an unlimited number of users from a central location.
Guest VLANThis field is used to configure the VLAN ID.
Primary RADIUS ServerIf you selected “RADIUS” for the authentication method, the primary RADIUS server is used for all authentication requests.
IP:In the input field, enter the IP address of the external RADIUS server in decimal-point notation.
UDP Port:Enter the UDP port in the input field.
Shared Key:Enter a password (up to 32 alphanumeric characters) in the input field to use as the common key for the connection between the external RADIUS server and the switch.This key must not be sent over the network. The key must be identical on the external RADIUS server and the switch.

Table 103: WBM "IEEE 802.1X" Page – "Global Settings" Tab

Secondary RADIUS ServerThis is the back-up server that is only used if the primary RADIUS server fails.
IP:In the input field, enter the IP address of the external RADIUS server in decimal-point notation.
UDP Port:0 ... 65535Enter the port number of the RADIUS server in the input field.
Shared Key:Enter a password (up to 32 alphanumeric characters) in the input field to use as the common key for the connection between the external RADIUS server and the switch.This key must not be sent over the network. The key must be identical on the external RADIUS server and the switch.
Authentication MethodThe user name and password are displayed, added or deleted in these input fields.
NoneIf you selected “None” in the selection box, you then cannot change the user name and password.
DeleteUser Name:If you selected “Delete” in the selection box, you can change the user name.
AddPassword:If you selected “Add” in the selection box, you can change the user name and password.
Global Status
ParameterDefaultDescription
StatusDisable EnableThis field indicates whether IEEE 802.1X authentication is enabled or disabled.
Authentication MethodLocal RADIUSThis field displays the authentication method.
Guest VLANThis field displays the guest VLAN.
Primary RADIUS ServerIP:This field displays the IP address, UDP port and common key for the primary RADIUS server.The fields are empty if no configuration is performed.
UDP Port:
Shared Key:
Secondary RADIUS ServerIP:This field displays the IP address, UDP port and common key for the secondary RADIUS server.The fields are empty if no configuration is performed.
UDP Port:
Shared Key:
Local Authenticated Useradmin,This field displays the list of users that are logged in.

9.4.3.2 Port Settings

802.1x Global Settings Port Settings Port Settings Port From: 1 To: 1 802.1x State Disable Admin Control Direction Reauthentication Port Control Mode Guest VLAN Max-req Times Both Disable Auto Disable 2 Reauth-period Quiet-period Supp-timeout Server-timeout Reset to Default 3600 20 30 16 □ Note : Please don't set "enable" on all ports at the same time. Apply Refresh Port Status Port 802.1x State Admin Control Direction Reauthentication Port Control Mode Guest VLAN Max-req Times Reauth-period Quiet-period Supp-timeout Server-timeout 1 Disable Both Disable Auto Disable 2 3600 20 30 16 2 Disable Both Disable Auto Disable 2 3600 20 30 16 3 Disable Both Disable Auto Disable 2 3600 20 30 16 4 Disable Both Disable Auto Disable 2 3600 20 30 16 5 Disable Both Disable Auto Disable 2 3600 20 30 16 6 Disable Both Disable Auto Disable 2 3600 20 30 16 7 Disable Both Disable Auto Disable 2 3600 20 30 16 8 Disable Both Disable Auto Disable 2 3600 20 30 16 9 Disable Both Disable Auto Disable 2 3600 20 30 16 10 Disable Both Disable Auto Disable 2 3600 20 30 16

Figure 98: WBM "IEEE 802.1X" Page – "Port Settings" Tab

Table 104: WBM "IEEE 802.1X" Page – "Port Settings" Tab

Port Settings
ParameterDefaultDescription
PortFrom:1Select a port or port range in the selection box to configure the “Port Settings.”
To:1Select a port or port range in the selection box to configure the “Port Settings.”
IEEE 802.1X StateDisableSelect “Disable” in the selection box to disable IEEE 802.1X authentication for the port.
EnableSelect “Enable” in the selection box to enable IEEE 802.1X authentication for the port.
NoteWago 852-1505 - Port Settings - 2IEEE 802.1X AuthenticationYou must first enable IEEE 802.1X authentication on the switch before you can configure this function for individual ports.
Admin Control DirectionBothIn the selection box, select “Both” to drop incoming and outgoing packets on the port when a user has not passed IEEE 802.1X port authentication.
InputIn the selection box, select “Incoming” to drop only incoming packets on the port when a user has not passed IEEE 802.1X port authentication.
ReauthenticationDisableSelect “Disable” in the selection box if a subscriber does not have to regularly reenter the user name and password to remain connected to the port.
EnableSelect “Enable” in the selection box if a subscriber has to regularly reenter the user name and password to remain connected to the port.
Port Control ModeAutoSelect “Auto” in the selection box to enable authentication for the port.
Force AuthorizedSelect “Force Authorized” in the selection box to enable permanent authentication for the port.
Force UnauthorizedSelect “Force Unauthorized” in the selection box to enable permanent denial of authentication for the port. No packets can pass through this port.
Guest VLANDisableSelect “Disable” in the selection box to disable the guest VLAN on the port.
EnableSelect “Enable” in the selection box to enable the guest VLAN on the port.
Max Req Times2Enter a value for the maximum required times in the input field that the switch should attempt to connect to the authentication server before it sees the server as not connected.
Reauth Period3600Enter a value in the input field for interval at which a subscriber has to reenter the user name and password to remain connected to the port.
Quiet Period60Enter a value for the time in the input field that the client must wait before it can request authentication again.This prevents the switch from becoming overloaded with continuous authentication attempts from the client.
Supp Timeout30Enter a value in the input field for the time that the switch must wait before it can communicate with the server.

Table 104: WBM "IEEE 802.1X" Page – "Port Settings" Tab

Server Timeout30Enter a value for the time in the input field that the switch should wait for a response from the authentication server.
Reset to DefaultNo custom settings for IEEE 802.1X port authentication are reset to the default values.
The custom settings for IEEE 802.1X port authentication are reset to the default values.

Table 104: WBM "IEEE 802.1X" Page – "Port Settings" Tab

Port Status
ParameterDefaultDescription
Port1 ... 10This column shows the port numbers.
IEEE 802.1X StateDisable EnableThis column indicates whether IEEE 802.1X authentication for a port is enabled or disabled.
Admin Control DirectionBoth IncomingThis column displays the “Control Direction.”
ReauthenticationDisable EnableThis column indicates whether the subscriber has to reenter the user name and password regularly to remain connected to the port.
Port Control ModeAutomatic, Force Authorized, Force UnauthorizedThis column displays the port control mode.
Guest VLANDisable EnableThis column displays the guest VLAN setting for hosts for which authentication has failed.
Max Req Times1 ... 10This column indicates how often the switch attempts to connect to the authentication server before it sees the server as not connected.
Reauth Period0 ... 65535This column displays the interval at which a subscriber must reenter the user name and password to remain connected to the port.
Quiet Period0 ... 65535This column displays the time that a client must wait before it can request authentication again.
Supp Timeout0 ... 65535This column indicates how long the switch should wait before communicating with the server.
Server Timeout0 ... 65535This column indicates how long the switch should wait before communicating with the client.

9.4.4 Port Security

Wago 852-1505 - Port Security - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "Port Security."

Port Security

Port Security Settings

PortStateMaximum MAC
From1To1Disable5(1~30)
ApplyRefresh

Port Security Status

PortStateMaximum MACPortStateMaximum MAC
1Disable52Disable5
3Disable54Disable5
5Disable56Disable5
7Disable58Disable5
9Disable510Disable5

Figure 99: WBM "Port Security" Page

Table 105: WBM "Port Security" Page

Port Security Settings
ParameterDefaultDescription
Port SecurityDisableSelect “Disable” in the selection box to disable port security on the switch.
EnableSelect “Enable” in the selection box to enable port security on the switch.
PortFrom:1Select a port or port range in the selection box to configure the port security.
To:1Select a port or port range in the selection box to configure the port security.
StateDisableSelect “Disable” in the selection box to disable port security for a port or port range.
EnableSelect “Enable” in the selection box to enable port security for a port or port range.
Maximum MAC Address (1–30)5Enter the maximum number of MAC addresses per interface in the input field.
Port Security Status
ParameterDefaultDescription
Port1 ... 10This column shows the port numbers.
StateEnable DisableThis field indicates whether port security is enabled or disabled.
Maximum MAC Address0 ... 30This column displays the maximum number of MAC addresses.

9.5 Monitor

9.5.1 Alarm Information

Wago 852-1505 - Alarm Information - 1

Note

Additional information

Please refer to the section "Function Description" for more information on the "Alarm."

Alarm Information

Alarm StatusNo Alarm.
Alarm Reason(s)
PortDIP switch settingsPortDIP switch settings
1Disable2Disable
3Disable4Disable
5Disable6Disable
7Disable8Disable
9Disable10Disable
PWRDisableRPSDisable

Figure 100: WBM "Alarm Information" Page

Table 106: WBM "Alarm Information" Page

Alarm Information
ParameterDefaultDescription
Alarm StatusThis display field shows if there are any alarm events.
Alarm ReasonThis display field shows details about the alarm events.
Port0 ... 10PWR RPSThis column displays the DIP switch name.
DIP Switch SettingsEnable DisableThis column displays the current status of the DIP switch.

9.5.2 System Information

Wago 852-1505 - System Information - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "System Information."

Monitor Information

Hardware Information

Temperature unit:

Celsius(C)

Wago 852-1505 - Additional information - 1

Change

Hardware Working Information:

Temperature(C)CurrentMAXMINThresholdStatus
BOARD38.838.819.5115.0Normal
CPU40.040.022.2115.0Normal
PHY39.239.221.2115.0Normal
Voltage(V)CurrentMAXMINThresholdStatus
1.0V IN1.0611.0611.061+/-5%Normal
2.5V IN2.4992.4992.496+/-5%Normal
3.3V IN3.2773.2773.255+/-5%Normal

Refresh

Figure 101: WBM "System Information" Page

Table 107: WBM "System Information" Page

Hardware Information
ParameterDefaultDescription
Temperature UnitCelsius (C)Select “Celsius (C)” in the selection box if you want to display the temperature in Celsius.
Fahrenheit (F)Select “Fahrenheit (F)” in the selection box if you want to display the temperature in Fahrenheit.
Hardware Information
ParameterDefaultDescription
Temperature (C)
CurrentThis column displays the current temperature of the “BOARD,” “CPU” and “PHY” MAC chip.
MAXThis column displays the maximum temperature of the “BOARD,” “CPU” and “PHY” MAC chip.
MINThis column displays the minimum temperature of the “BOARD,” “CPU” and “PHY” MAC chip.
ThresholdThis column displays the threshold setting.
StatusThis column displays the status.
Voltage [V]
CurrentThis column displays the current voltage for the “1.0 V IN,” “2.5 V IN” and “3.3 V IN” inputs.
MAXThis column displays the maximum voltage for the “1.0 V IN,” “2.5 V IN” and “3.3 V IN” inputs.
MINThis column displays the minimum voltage for the “1.0 V IN,” “2.5 V IN” and “3.3 V IN” inputs.
ThresholdThis column displays the threshold setting.
StatusThis column displays the status.

9.5.3 Port Statistics

Hinweis

Wago 852-1505 - Hinweis - 1

Additional information

Please refer to the section "Function Description" for more information on the "Port Statistics."

Port Statistics

Port Statistics

PortTransmit DropsReceive DropsTransmit ErrorsReceive ErrorsTransmit PacketsReceive PacketsTransmit BytesReceive Bytes
1000021646314834134125
70000127308137203022553918074210

Refresh

Clear

Figure 102: WBM "Port Statistics" Page
Table 108: WBM "Port Statistics" Page

Port Statistics
ParameterDefaultDescription
PortThis column shows the port numbers.
Transmit DropsThis column displays the number of dropped data packets on the transmission line.
Receive DropsThis column displays the number of dropped data packets on the receiving line.
Transmit ErrorsThis column displays the errors on the transmission line.
Receive ErrorsThis column displays the errors on the receiving line.
Transmit PacketsThis column displays the number of data packets transmitted since power ON.
Receive PacketsThis column displays the number of data packets received since power ON.
Transmit ByteThis column displays the number of bytes sent on the port since power ON.
Receive BytesThis column displays the number of bytes received on the port since power ON.

9.5.4 Port Utilization

Wago 852-1505 - Port Utilization - 1

Note

Additional information

Please refer to the section "Function Description" for more information on the "Port Utilization."

Port Utilization

Port Traffic Utilization Status

PortSpeedRX Traffic Utilization (%)RX Traffic Utilization (bps)TX Traffic Utilization (%)TX Traffic Utilization (bps)
810000.00179730.0020701

Refresh

Figure 103: WBM "Port Utilization" Page
Table 109: WBM "Port Utilization" Page

Port Utilization Status
ParameterDefaultDescription
PortThis column shows the port numbers.
SpeedThis column displays the transfer rate.
RX Port Utilization (%)This column displays the RX bandwidth utilization as a percentage.
RX Port Utilization (bps)This column displays the RX bandwidth utilization in bps.
TX Port Utilization (%)This column displays the TX bandwidth utilization as a percentage.
RX Port Utilization (bps)This column displays RX bandwidth utilization in bps.

9.5.5 RMON Statistics

Wago 852-1505 - RMON Statistics - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "RMON Statistics."

RMON Statistics

Port 7 (active)
InboundTotal Octets31396855
BroadcastPkts33934UnicastPkts15776
Non-unicastPkts119530MulticastPkts85596
FragmentsPkts0UndersizePkts0
OversizePkts0DiscardsPkts0
ErrorPkts0UnknownProtos0
AlignError0CRCAlignErrors0
Jabbers0DropEvents0
OutboundTotal Octets19847117
BroadcastPkts0UnicastPkts16241
Non-unicastPkts219182Collisions0
LateCollision0SingleCollision0
MultipleCollision0DiscardsPkts0
ErrorPkts0
#of packets received with a length of64 Octets28103965to127 Octets38366
128to255 Octets4001256to511 Octets7342
512to1023 Octets376891024toMax Octets2292

Figure 104: WBM "RMON Statistics" Page

Table 110: WBM "RMON Statistics" Page

RMON Statistics
ParameterDefaultDescription
Port-Select “-” in the selection box if you do not want to view any statistics.
1 ... 10 AllIn the selection box, select a port, or all ports, for which you want to display RMON statistics.
Selected Port x (active)
ParameterDefaultDescription
IncomingTotal OctetsThis display field shows the number of data packets received on the port.
Broadcast PacketsThis display field shows the number of broadcast packets received on the port.
Unicast PacketsThis display field shows the number of unicast packets received on the port.
Non Unicast PacketsThis display field shows the total number of broadcast and multicast packets received on the port.
Multicast PacketsThis display field shows the number of multicast packets received on the port.
Fragmented PacketsThis display field shows the number of fragmented data packets received on the port.
Undersized PacketsThis display field shows the number of data packets received on the port that are too small.
Oversized PacketsThis display field shows the number of data packets received on the port that are too large.
Discards PacketsThis display field shows the number of data packets received on the port that were dropped.
Error PacketsThis display field shows the number of data packets received on the port that were faulty.
Unknown ProtosThis display field shows the number of packets received by this port that contain an unknown or unsupported protocol as the destination.
Align ErrorThis display field shows the number of data packets received where the total number of bits of a received frame is not divisible by eight.
CRC Align ErrorThis display field shows the number of data packets received with a checksum error.
JabbersThis display field shows the number of jabbers received by this port.
Drop EventsThis display field shows the number of dropped data packets.

Table 110: WBM "RMON Statistics" Page

OutgoingTotal OctetsThis display field shows the number of data packets sent from the port.
Broadcast PacketsThis display field shows the number of broadcast packets sent from the port.
Unicast PacketsThis display field shows the number of unicast packets sent from the port.
Non Unicast PacketsThis display field shows the number of unicast packets sent from the port.
CollisionsThis display field shows the number of data packets that were to be sent, have collided and were discarded.
Late CollisionThis display field shows the number of data packets that were to be sent, have collided and were discarded.
Single CollisionsThis display field shows the number of single collisions of the data packets sent.
Multiple CollisionsThis display field shows the number of multiple collisions of the data packets sent.
Discards PacketsThis display field shows the number of data packets sent from the port that were dropped.
Error PacketsThis display field shows the number of data packets sent from the port that were faulty.
#(number) of packets received with a length of ?.64 OctetsThis display field shows the number of data packets received that had a length of 64 octets.
65 to 127 OctetsThis display field shows the number of data packets received that had a length of 65 to 127 octets.
128 to 255 OctetsThis display field shows the number of data packets received that had a length of 128 to 255 octets.
256 to 511 OctetsThis display field shows the number of data packets received that had a length of 256 to 511 octets.
512 to 1023 OctetsThis display field shows the number of data packets received that had a length of 512 to 1023 octets.
1024 to Max. OctetsThis display field shows the number of data packets received that had a length of more than 1024 octets.

9.5.6 SFP Information

SFP Information

SFP Information

Port

Wago 852-1505 - SFP Information - 1

Wago 852-1505 - SFP Information - 2

Wago 852-1505 - SFP Information - 3

Wago 852-1505 - SFP Information - 4

Wago 852-1505 - SFP Information - 5

Wago 852-1505 - SFP Information - 6

SFP Information
Fiber CableLink Down
ConnectorLC
Wavelength(nm)850
Transfer Distance(nm)550m(50um, OM2), Multi mode
DDM Supported(nm)YES (Internally Calibrated)
Vendor Name(nm)WAGO
Vendor PN(nm)852-1200
Vendor rev(nm)V2.0
Vendor SN(nm)AX15430007994
Date code(nm)151022

SFP Information

DDMI Information(nm)
Current(nm)High-Alarm (nm)Low-Alarm (nm)High-Warn (nm)Low-Warn (nm)
Temperature(C)39.62990.000-45.00085.000-40.000
Voltage(V)3.2643.6003.0003.5003.100
Tx Bias(mA)5.79425.0001.00020.0002.000
Tx Power(mW)0.2000.5010.0890.3980.112
Tx Power(dBm)-6.984-3.000-10.505-4.001-9.506
Rx Power(mW)0.0000.0000.0000.0000.000
Rx Power(dBm)0.0000.0000.0000.0000.000

Figure 105: WBM "SFP Information" Page

Table 111: WBM "SFP Information" Page

SFP Information
ParameterDefaultDescription
Port-Select “-” in the selection box if you have not inserted an SFP module
9, 10In the selection box, select the port in which you have inserted an SFP module.
SFP Information
ParameterDefaultDescription
Fiber CableThis display field shows if a fiber optic cable is connected.
ConnectorThis display field shows the code for the optical connector type.
Wavelength (nm)This display field shows the wavelength.
Transfer Distance (nm)This field displays the transmission distance.
DDM Support (nm)This display field shows if the SFP module supports DDM (“Dynamic Device Mapping”).
Vendor Name (nm)This display field shows the name of the SFP provider.
Vendor Part Number (nm)This display field shows the part number.
Vendor Revision Status (nm)This display shows the revision status of the part number.
Vendor Serial Number (nm)This display field shows the serial number (ASCII).
Date code (nm)This field displays the version date.

Table 111: WBM "SFP Information" Page

DDMI Information (nm)
ParameterDefaultDescription
Current (nm)This column displays the following current values:- Temperature (C)- Voltage (V)- Tx bias (mA)- Tx power (mW)- Tx power (dBm)- Rx power (mW)- Rx power (dBm)
High-Alarm (nm)This column displays the “Alarm High” values of the following values:- Temperature (C)- Voltage (V)- Tx bias (mA)- Tx power (mW)- Tx power (dBm)- Rx power (mW)- Rx power (dBm)
Low-Alarm (nm)This column displays the “Alarm Low” values of the following values:- Temperature (C)- Voltage (V)- Tx bias (mA)- Tx power (mW)- Tx power (dBm)- Rx power (mW)- Rx power (dBm)
High-Warn (nm)This column displays the “Warning High” values of the following values:- Temperature (C)- Voltage (V)- Tx bias (mA)- Tx power (mW)- Tx power (dBm)- Rx power (mW)- Rx power (dBm)
Low-Warn (nm)This column displays the “Warning Low” values of the following values:- Temperature (C)- Voltage (V)- Tx bias (mA)- Tx power (mW)- Tx power (dBm)- Rx power (mW)- Rx power (dBm)

9.5.7 Traffic Monitor

Wago 852-1505 - Traffic Monitor - 1

Note

Additional information

Please refer to the section "Function Description" for more information on the "Traffic Monitor."

Traffic Monitor

Traffic Monitor Settings

StateDisable
PortStateActionPacket TypePacket Rate (pps)Recovery StateRecovery Time (min)
From: 1To: 1DisableNoneBroadcast100Enable1
ApplyRefresh

Traffic Monitor Status

PortStateStatusPacket TypePacket Rate(pps)Recovery StateRecovery Time(min)
1DisableNormalBroadcast100Enable1
2DisableNormalBroadcast100Enable1
3DisableNormalBroadcast100Enable1
4DisableNormalBroadcast100Enable1
5DisableNormalBroadcast100Enable1
6DisableNormalBroadcast100Enable1
7DisableNormalBroadcast100Enable1
8DisableNormalBroadcast100Enable1
9DisableNormalBroadcast100Enable1
10DisableNormalBroadcast100Enable1

Figure 106: WBM "Traffic Monitor" Page

Table 112: WBM "Traffic Monitor" Page

Traffic Monitor Settings
ParameterDefaultDescription
StateDisableSelect “Disable” in the selection box to disable the “Traffic Monitor” function globally.
EnableSelect “Enable” in the selection box to enable the “Traffic Monitor” function globally.
PortFrom:1Select a port or port range in the selection box which you want to configure.
To:1Select a port or port range in the selection box which you want to configure.
StateDisableSelect “Disable” in the selection box if you want to disable the “Traffic Monitor” function for the port or port range.
EnableSelect “Enable” in the selection box if you want to enable the “Traffic Monitor” function for the port or port range.
ActionNoneSelect “None” in the selection box if you do not want to cancel port blocking.
UnblockSelect “Unblocked” in the selection box if you want to cancel port blocking.
Packet TypeBroadcastSelect “Broadcast” in the selection box if you want to monitor this as the packet type.
MulticastSelect “Multicast” in the selection box if you want to monitor this as the packet type.
Bcast+McastSelect “Bcast+Mcast” in the selection box if you want to monitor both as the packet types.
Packet Rate (pps)In the input field, enter the packet rate that you want to monitor.
Recovery StateEnableSelect “Enable” in the selection box if you want to enable the recovery function with the “Traffic Monitor” function for the port or port range.
DisableSelect “Disable” in the selection box if you want to disable the recovery function with the “Traffic Monitor” function for the port or port range.
Recovery Time1In the input field, enter the recovery time that you want to monitor.
Quarantine Time3Enter a value in the input field for the “Quarantine Time” for the “Traffic Monitor” function.

Table 112: WBM "Traffic Monitor" Page

Traffic Monitor Status
ParameterDefaultDescription
Port1 ... 10This column shows the port numbers.
StateDisable EnableThis column displays the status of the specific port.
StatusNormalThis column displays the status of the operational state.
Packet TypeBroadcast Multicast Bcast+McastThis column displays the type of data packet.
Packet Rate (pps)This column displays the selected packet rate.
Recovery StatusEnable DisableThis column displays the status of the selected recovery function.
Recovery Time (min)1 ... 60This column displays the selected recovery time.
Quarantine Time3This column displays the selected quarantine time.

9.6 Management

9.6.1 SNMP

9.6.1.1 SNMP

9.6.1.1.1 SNMP Settings

Wago 852-1505 - SNMP Settings - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "SNMP" (Simple Network Management Protocol).

SNMP SNMP Settings Community Name SNMP Settings SNMP State Disable System Name L2SWITCH System Location System Contact Apply Refresh

Figure 107: WBM "SNMP" Page – "SNMP Settings" Tab

Table 113: WBM "SNMP" Page – "SNMP Settings" Tab

SNMP Settings
ParameterDefaultDescription
SNMP StateDisableSelect “Disable” in the selection box to disable SNMP on the switch.
EnableSelect “Enable” in the selection box to enable SNMP on the switch.
System NameL2SWITCHEnter the system name for the switch in the input field.(The system name and host name are identical.)
System Location192.168.0.254Enter the IP address (location information) of the switch in decimal-point notation.
System Contact255.255.255.0Enter the IP subnet mask of the switch in decimal-point notation.

9.6.1.1.2 Community Name

SNMP SNMP Settings Community Name Community Name Settings Community String Rights IP version Network ID of Trusted Host Number of Mask Read-Only ▼ IPv4 ▼ Apply Refresh Save Configurations Community Name List No. Community String Rights IP version Network ID of Trusted Host Number of Mask Bit Action

Figure 108: WBM "SNMP" Page – "Community Name" Tab

Table 114: WBM SNMP" Page – "Community Name" Tab

Community Name Settings
ParameterDefaultDescription
Community StringEnter the “Community String” that acts as a password for requests from the management station.
RightsRead OnlySelect ““Read Only” in the selection box so that the SNMP manager can use this string to receive information from the switch.
Read/WriteSelect “Read/Write” in the selection box so that the SNMP manager can use this string to configure settings on the switch.
IP VersionIPv4Select “IPv4” in the selection field if you want to select this version of the Internet protocol.
IPv6Select “IPv6” in the selection box if you want to select this version of the Internet protocol.
Network ID of the Trusted HostEnter the IP address of the remote SNMP management station in decimal-point notation (e.g., 192.168.1.0).
MaskEnter the IP address of the subnet mask for the remote SNMP management station in decimal-point notation (e.g., 255.255.255.0).
Community Name List
ParameterDefaultDescription
No.This column displays the “Community” number. It is used for identification only.Click a number to modify the setting for a specific “Community.”
Community StringThis column displays the “SNMP Community String.” This is a text element that acts as a password.
RightsRead Only, Read/WriteThis column displays the rights for the “SNMP Community String.”
IP VersionIPv4IPv6This field displays the selected IP type.
Network ID of the Trusted HostThis column displays the IP address of the remote SNMP management station after it has been modified by the subnet mask.
MaskThis column displays the subnet mask for the IP address of the remote SNMP management station.
ActionClick [Delete] to delete a specific “Community String.”

9.6.1.2 SNMP Trap

9.6.1.2.1 Trap Receiver Settings

SNMP Trap Trap Receiver Settings Trap Receiver Settings IP Version IP Address Version Community String IPv4 Apply Refresh Save Configurations Trap Receiver List No. IP Version IP Address Version Community String Action

Figure 109: WBM "SNMP Trap" Page – "Trap Receiver Settings" Tab

Table 115: WBM "SNMP Trap" Page – "Trap Receiver Settings" Tab

Trap Receiver Settings
ParameterDefaultDescription
IP VersionIPv4Select “IPv4” in the selection field if you want to select this version of the Internet protocol.
IPv6Select “IPv6” in the selection box if you want to select this version of the Internet protocol.
IP AddressEnter the IP address of the remote trap station in decimal-point notation.
Versionv1Select “v1” in the selection box if you want to use SNMP Version v1.
v2cSelect “v2c” in the selection box if you want to use SNMP Version v2c.
Community StringEnter the IP address of the remote SNMP management station in decimal-point notation (e.g., 192.168.1.0).
Trap Receiver List
ParameterDefaultDescription
No.This column displays the “Community” number. It is used for identification only.Click a number to modify the setting for a specific “Community.”
IP VersionIPv4IPv6This column displays the selected IP type.
IP AddressThis column displays the IP address of the remote trap station.
Versionv1v2cThis column displays the SNMP version in use.
Community StringThis column displays the “Community String” used by the remote trap station.
ActionClick the [Delete] button to delete a configured trap receiver station.

9.6.1.3 SNMPv3 Configuration

9.6.1.3.1 SNMPv3 User

Wago 852-1505 - SNMPv3 User - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "SNMPv3."

SNMPv3 Configuration SNMPv3 User SNMPv3 Group SNMPv3 View SNMPv3 User Settings User Name Group Name Security Level=noauth Auth Algorithm MD5 Auth Password Priv Algorithm DES Priv Password Apply Refresh Save Configurations SNMPv3 User Status User Name Group Name Auth Protocol Priv Protocol Rowstatusakoin Empty SNMPv3 User1

Figure 110: WBM "SNMPv3 Configuration" Page – "SNMPv3 User" Tab

Table 116: WBM "SNMPv3 Configuration" Page – "SNMPv3 User" Tab

SNMPv3 User Settings
ParameterDefaultDescription
User NameEnter a new user name in the input field, or modify an existing user name.
Group NameEnter the group name for the SNMPv3 in the input field.
Security LevelThis selection box is used to select he security level.
noauthIf you selected “noauth” in the selection box, you then cannot change the “Auth Algorithm” or the “Priv Algorithm.”
authIf you selected “auth” in the selection box, you then can change the “Auth Algorithm” and the “Auth Password.”
privIf you selected “priv” in the selection box, you then can change the “Auth Algorithm,” the “Priv Algorithm” and the “Priv Password.”
Auth AlgorithmMD5If you selected “auth” or “priv” in the selection box, you then can change the “Auth Algorithm” “MD5.”
SHAIf you selected “auth” or “priv” in the selection box, you then can change the “Auth Algorithm” “SHA.”
Auth PasswordIf you selected “auth” in the selection box, you can enter a password in the input field (consist of at least eight alphanumeric characters).
Priv AlgorithmDESIf you selected “priv” in the selection box, you can then select “DES” in the selection box.
AESIf you selected “priv” in the selection box, you can then select “AES” in the selection box.
Priv PasswordIf you selected “priv” in the selection box, you can enter a password in the input field (consist of at least eight alphanumeric characters).
SNMPv3 User Status
ParameterDefaultDescription
User NameThis column displays the user name.
Group NameThis column displays the group name.
Auth ProtocolThis column displays the selected “Auth Algorithm.”
Priv ProtocolThis column displays the selected “Priv Algorithm.”
Row StatusThis column ???.
ActionClick [Delete] to delete a specific entry.

9.6.1.3.2 SNMPv3 Groups

SNMPv3 Configuration SNMPv3 User SNMPv3 Group SNMPv3 View SNMPv3 Group Settings Group Name Security Level noauth ✓ Read View Write View Notify View Apply Refresh Save Configurations SNMPv3 Group Status Group Name Security Model Security Level Read View.Write View Notify View Action Empty SNMPv3 Group!

Figure 111: WBM "SNMPv3 Configuration" Page – "SNMPv3 Groups" Tab

Table 117: WBM "SNMPv3 Configuration" Page – "SNMPv3 Groups" Tab

SNMPv3 Group Settings
ParameterDefaultDescription
Group NameEnter the group name for the SNMPv3 group in the input field.
Security LevelThis selection box is used to select he security level.
Noauth auth privSelect the respective security level in the selection box.
Read ViewIn the input field, enter the name of the objects that should be available in the Read view. If you do not enter an object, all objects will be readable.
Write ViewIn the input field, enter the name of the objects to which you want to grant write access.
Notify ViewIn the input field, enter the name of the object that can receive user notifications.
SNMPv3 Group Status
ParameterDefaultDescription
Group NameThis column displays the group name.
Security ModelThis column displays the selected security level.
Security LevelThis column displays the selected security level.
Read ViewThis column displays the Read view
Write ViewThis column displays the Write view
Notify ViewThis column displays the Notify view
ActionClick [Delete] to delete a specific entry.

9.6.1.3.3 SNMPv3 View

SNMPv3 Configuration SNMPv3 User SNMPv3 Group SNMPv3 View SNMPv3 View Settings View Name View Subtree View Type included Apply Refresh Save Configurations SNMPv3 View Status View Name View Subtree View Type Illustration SNMPv3 View Table is empty!

Figure 112: WBM "SNMPv3 Configuration" Page – "SNMPv3 View" Tab

Table 118: WBM "SNMPv3 Configuration" Page – "SNMPv3 View" Tab

SNMPv3 View Settings
ParameterDefaultDescription
View NameEnter the name for the SNMPv3 view in the input field.
View SubtreeEnter the name for the subtree in the input field.
View TypeInsertedIf you selected “Inserted” in the selection box, the subtree is inserted
RemovedIf you selected “Removed” in the selection box, the subtree is not inserted.
SNMPv3 View Status
ParameterDefaultDescription
View NameThis column displays the name of the SNMPv3 view.
View SubtreeThis column displays the name of the subtree.
View TypeInserted RemovedThis column displays the selected type.
ActionClick [Delete] to delete a specific entry.

9.6.2 Auto Provision

Wago 852-1505 - Auto Provision - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "Auto Provision."

Auto Provision

Auto Provision Settings State Disable Status Disable Version 0 Protocol FTP Server IP 0.0.0.0 User Name Password Folder Path Apply Refresh

Figure 113: WBM "Auto Provision" Page

Table 119: WBM "Auto Provision" Page

Auto Provision Settings
ParameterDefaultDescription
StateDisableSelect “Disable” in the selection box to disable the “Auto Provision” function on the switch.
EnableSelect “Enable” in the selection box to enable the “Auto Provision” function on the switch.
StatusDisableThis field displays the “Auto Provision” status.
Version0This field displays the version.
ProtocolFTPSelect “FTP” (“File Transfer Protocol”) in the selection box if you want to select this type as the Auto Provision server.
TFTPSelect “TFTP” (“Trivial File Transfer Protocol”) in the selection box if you want to select this type as the Auto Provision server.
HTTPSelect “HTTP” (“Hypertext Transfer Protocol”) in the selection box if you want to select this type as the Auto Provision server.
Server IPEnter the ID for the IP subnet mask of the server in decimal-point notation.
User NameEnter the name for the FTP server in the input field.
PasswordEnter the password for the FTP server in the input field.
Folder PathSelect the folder structure of the FTP server in this input field.

9.6.3 Mail Alarm

Wago 852-1505 - Mail Alarm - 1

Note

Additional information

Please refer to the section "Function Description" for more information on "Mail Alarm."

Mail Alarm Mail Alarm Settings State Disable Server IP IP 0.0.0.0 Server Port 25 (Default:25) Account Name Account Password Mail From Mail To Trap State : Select All Deselect All System Reboot Port Link Change Configuration Change Firmware Upgrade User Login Port Blocked Alarm Apply Refresh

Figure 114: WBM "Mail Alarm" Page

Table 120: WBM "Mail Alarm" Page

Mail Alarm Settings
ParameterDefaultDescription
StateDisableSelect “Disable” in the selection box to disable the “Mail Alarm” function.
EnableSelect “Enable” in the selection box to enable the “Mail Alarm” function.
Server IPIPSelect “IP” in the selection box if you want to use the server IP of the mail server.
IPv6Select “IPv6” in the selection box if you want to use the server IP of the IPv6 server.
DomainSelect “Domain” in the selection box if you want to use the domain address of the mail server.
0.0.0.0Enter the IP address in the input field.
Server Port (Default:25)25Enter the TCP port for SMTP in the input field.
Account NameEnter the name of the e-mail account in the input field.
Account PasswordEnter the password for the e-mail account in the input field.
Mail fromEnter the name of the e-mail sender in the input field.
Mail toEnter the name of the e-mail recipient in the input field.
Trap StateSelect AllNo port has been selected for sending event traps.
All ports are selected for sending event traps.
Disable AllNo port has been disabled for sending event traps.
All ports are disabled for sending event traps.
System RestartThe port is not enabled.
The port is enabled.
Port Link ChangeThe “Port Link Change” state is disabled.
The “Port Link Change” state is enabled.
Configuration ChangeThe “Configuration Change” state is disabled.
The “Configuration Change” state is enabled.
Firmware UpdateThe “Firmware Upgrade” state is disabled.
The “Firmware Upgrade” state is enabled.
User LoginThe “User Login” state is disabled.
The “User Login” state is enabled.
Port BlockedThe “Port Blocked” state is disabled.
The “Port Blocked” state is enabled.
AlarmThe “Alarm” state is disabled.
The “Alarm” state is enabled.

9.6.4 Maintenance

9.6.4.1 Configuration

Maintenance Configuration Firmware Reboot Server Save Configurations Save the parameter settings of the Switch : Save Configurations Upload and Download Configurations ○ Upload configuration file to your Switch. File path Choose File No file chosen Upload ○ Press "Download" to save configuration file to your PC. Download Reset Configurations Reset the factory default settings of the Switch : - IP address will be 192.168.1.254 Reset The configurations status 1999-11-14 05:50:42.000: Configurations are changed by UI.

Figure 115: WBM "Maintenance" Page – "Configuration" Tab

Save Configuration

- Click the [Save] button to save the current settings in NV-RAM (Flash).

Upload and Download of the Configuration

Execute the following steps to save the configuration file to your PC.

  1. Select "Press Download to save the configuration file to your PC."
  2. Click the [Download] button to start the download.

Execute the following steps to upload the configuration file from your PC to the switch.

  1. Select "Upload the configuration file to the switch."
  2. Click the [Choose file] button.
    Select the configuration file by specifying the full path.
  3. Click the [Upload] button to begin uploading the file.

Reset Configuration

- Click the [Reset] button to reset the switch configuration to the factory default.

Configuration Status

"The configurations have been changed" indicates that changes have been made to the configurations.

If no changes were made to the configurations, the following message appears: "The user configuration file is the default. The configurations are default values."

9.6.4.2 Firmware

Maintenance Configuration Firmware Reboot Server Upgrade Firmware File path Durchsuchen... Choose File No file chosen Upgrade

Figure 116: WBM "Maintenance" Page – "Firmware" Tab

Firmware Update

Execute the following steps to update the switch's firmware.

  1. Click the [Choose file] button.
    The file selection dialog opens. Select the respective firmware file.

  2. Click the [Upgrade] button to load the new firmware.

9.6.4.3 Reboot

Maintenance Configuration Firmware Reboot Server Reboot Press "Reboot" to restart the Switch. Reboot

Figure 117: WBM "Maintenance" Page – "Reboot" Tab

Reboot

The "Reboot" function allows you to restart the switch without physically turning the power off.

Follow the steps below to reboot the switch.

  1. Click the [Reboot] button in the "Reboot" menu. The following windows open:

Wago 852-1505 - Reboot - 1

Figure 118: WBM "Maintenance" Page – "Reboot" Tab – Message

  1. Click [OK] and wait for the switch to restart. The process can take up to two minutes. This process does not change the switch configuration.

9.6.4.4 Protocols

Maintenance Configuration Firmware Reboot Server Server Settings HTTP Server State Enable HTTP Server TCP Port 80 (80,1025~9999) HTTPS Server State Enable SNMP v1/v2c Server State Enable SNMP v3 Server State Enable SSH Server State Enable TELNET Server State Enable TELNET Server TCP Port 23 (23,1025~9999) Apply Refresh Save Configurations Server State HTTP Server State Enable HTTP Server TCP Port 80 HTTPS Server State Enable SNMP v1/v2c Server State Enable SNMP v3 Server State Enable SSH Server State Enable TELNET Server State Enable TELNET Server TCP Port 23

Figure 119: WBM "Maintenance" Page – "Protocols" Tab

Table 121: WBM "Maintenance" Page – "Protocols" Tab

Server Settings
ParameterDefaultDescription
HTTP Server StateEnableSelect “Enable” to enable the HTTP server.
DisableSelect “Disable” to disable the HTTP server.
HTTP Server TCP Port (80, 1025–9999)801025 ... 9999Enter the “HTTP Server TCP Port” in the input field.
HTTP Server StateEnableSelect “Enable” to enable the HTTPS server.
DisableSelect “Disable” to disable the HTTPS server.
SNMP v1/v2c Server StateEnableSelect “Enable” to enable the SNMP v1/v2c server.
DisableSelect “Disable” to disable the SNMP v1/v2c server.
SNMP v3 Server StateEnableSelect “Enable” to enable the SNMP v3 server.
DisableSelect “Disable” to disable the SNMP v3 server.
SSH Server StateEnableSelect “Enable” to enable the SSH server.
DisableSelect “Disable” to disable the SSH server.
Telnet Server StateEnableSelect “Enable” to enable the Telnet server.
DisableSelect “Disable” to disable the Telnet server.
Telnet Server TCP Port (23, 1025–9999)231025 ... 9999Enter the “Telnet Server TCP Port” in the input field.
Server Status
ParameterDefaultDescription
HTTP Server StateEnableDisableThis field displays the status of the HTTP server.
HTTP Server TCP Port801025 ... 9999This field displays the status of the HTTP server TCP port.
HTTP Server StateEnableDisableThis field displays the status of the HTTPS server.
SNMP v1/v2c Server StateEnableDisableThis field displays the status of the SNMP v1/v2c server.
SNMP v3 Server StateEnableDisableThis field displays the status of the SNMP v3 server.
SSH Server StateEnableDisableThis field displays the status of the SSH server.
Telnet Server StatusEnableDisableThis field displays the status of the Telnet server.
Telnet Server TCP Port231025 ... 9999This field displays the status of the Telnet server TCP port.

9.6.5 System Log

The "syslog" function records various system information for "Debugging."

Each log entry records one of the following levels:

  • Alert
  • Critical
  • Error
  • Warning
  • Notice

- Information

The Syslog function can be enabled or disabled. The default setting is "disabled."

The log message is recorded in the switch's file system. If the IP address of the syslog server has been configured, the switch sends a copy to it.

Wago 852-1505 - System Log - 1

Note

Size of the Log Message File

The size of the log message file is limited to 4 KB. If the file is full, the oldest message is replaced.

System Log Syslog Server Setting Server IP IPv4 Disable Facility (5) Messages generated internally by syslogd Apply System Log Log Level All Show Refresh Clear Save No data.

Figure 120: WBM "System Log" Page

Table 122: WBM "System Log" Page

Syslog Server Settings
ParameterDefaultDescription
Server IPIPv4Select “IPv4” in the selection field if you want to select this version of the Internet protocol.
IPv6Select “IPv6” in the selection box if you want to select this version of the Internet protocol.
Enter the IP address in decimal-point notation (e.g., 192.168.1.1).
DisableSelect “Disable” in the selection box to prevent the switch from sending all new log messages to the syslog server.
EnableSelect “Enable” in the selection box to allow the switch to send all new log messages to the syslog server.
Facility(1) User-level messagesSelect “(1) User-level messages” in the selection box if you want to display user-specific messages.
(5) Messages generated internally by syslogdSelect “(5) Messages generated internally by syslogd” in the selection box if you want to display messages generated by syslog internally.
(14) Log alert
(16) Local use 0
(17) Local use 1
(18) Local use 2
(19) Local use 3
(20) Local use 4
(21) Local use 5
(22) Local use 6
(23) Local use 7
System Log
ParameterDefaultDescription
Log LevelAllSelect “All” in the selection box if you want to display all log messages.
1:AlarmSelect “Alarm” in the selection box if you want to display the log messages.
2:CriticalSelect “Critical” in the selection box if you want to display critical log messages.
3:ErrorSelect “Error” in the selection box if you want to display the errors.
4:WarningSelect “Warning” in the selection box if you want to display the warnings.
5:NoticeSelect “Notice” in the selection box if you want to display the notices.
6:InformationSelect “Information” in the selection box if you want to display all information.

9.6.6 User Account

The switch allows users to create up to six user accounts. The user name and password must be a combination of numbers or letters. The last admin account cannot be deleted. To use the CLI or Web-Based Management, a user has to be logged into a valid user account.

User Permissions

The switch support two types of user accounts:

The default user accounts have the following credentials:

Firmware Version 01: User Name = "admin"

User Password = "Wago1951"

Firmware Version 02: User Name = "admin"

User Password = "wago"

  1. Admin account

Read/Write permissions

  1. Normal user account Read permission only

- Use of the privileged mode in the CLI is not possible.

- Configurations cannot be changed in the Web-Based Management.

The switch also supports a “backdoor” user account. If a user has forgotten his user name or password, the switch can create a “backdoor” account with the MAC address of the system. A user can then log into the switch and create a new account.

User Account User Account Settings User Name User Password User Authority Normal Apply Refresh No. No. Name Authority Action 1 admin Admin

Figure 121: WBM "User Account" Page

Table 123: WBM "User Account" Page

User Account Settings
ParameterDefaultDescription
User NameEnter a new user name in the input field, or modify an existing user name.
User PasswordEnter a new password in the input field, or modify an existing password.You can enter up to 32 alphanumeric characters or digits.
User AuthorityIn this box, select the type of user account.
NormalSelect “Normal” in the selection box if you need only read permission for this user account.
AdminSelect “Admin” in the selection box if you need read and write permission for this user account.
No.
ParameterDefaultDescription
No.This column displays the index number of an entry.
NameThis column displays the name of the user account.
AuthorityThis column displays the type of user account.
ActionClick the [Delete] button to delete a user account.
NoteWago 852-1505 - User Permissions - 2NoteDeleting an administrator accountThe last admin account cannot be deleted.

10 Appendix

10.1 Console Port (RJ-45 to DB9)

Use the included console cable to connect the console port of the industrial managed switch to the COM port. The connector pin assignment is:

Wago 852-1505 - Console Port (RJ-45 to DB9) - 1
Figure 122: RJ-45 Connector Pin Assignment

Konsolen- anschluss RJ-45 Plug Pin 1 COM Port DJ-45 Stecker Anschlussbelegung DB9 Buchsen- stecker 1 1 DCD RxD 2 2 RxD TxD 3 3 TxD DTR 4 4 DTR GND 5 5 GND DSR 6 6 DSR 7 7 RTS 8 8 CTS R

Figure 123: Connector Pin Assignment RJ-45 to DB9

10.2 RJ-45 Cable

Always use category 5e cables to connect your network devices. The pin assignment is given below:

Table 124: RJ-45 Cable

ContactDescriptionPairColor (acc. EIA/TIA 568B)
4-wire8-wire
1TDD1+2White/Orange
2TD-D1-2Orange
3RX+D2+3White/Green
4Not assignedD3+1Blue
5Not assignedD3-1White/Blue
6RX-D2-3Green
7Not assignedD4+4White/Brown
8Not assignedD4-4Brown

Wago 852-1505 - RJ-45 Cable - 1

Note

Functions on the RJ45 connector

The industrial managed switch offers the functions autocrossing und autonegotiation to the RJ-45 connection.

10.3 Configuring in the Command Line Interface (CLI)

10.3.1 System Status

10.3.1.1 System Information

Table 125: CLI "System Information" Configuration

NodeCommandDescription
enableshow hostnameThis command displays the system's network name.
configurerebootThis command reboots the system.
eth0ip address A.B.C.D/MThis command configures the static IP and subnet mask for the system.
interfaceshowThis command displays the current port configuration.
aclshowThis command displays the current access control list.
vlanshowThis command displays the current VLAN configuration.
enableshow interface eth0This command displays the current Eth0 configurations.
enableshow modelThis command displays the system information.
enableshow running-configThis command displays the current operating configurations.
enableshow system-infoThis command displays the system's CPU utilization and memory information.
enableshow uptimeThis command displays the system uptime.

10.3.2 Basic Settings

10.3.2.1 System

Table 126: CLI "System" Configuration

NodeCommandDescription
enableping IPADDR [-c COUNT]
enableping IPADDR s SIZE]
enableping IPADDR [-c COUNT -s SIZE]
enableping IPADDR [-s SIZE -c COUNT]
configurereboot
configurehostname STRINGSThis command sets the system's network name.
configureinterface eth0This command enters the eth0 interface node to configure the system IP.
configureconfigure terminal
configureinterface eth0
eth0show
eth0ip address A.B.C.D/M
eth0ip address default-gateway A.B.C.DThis command configures the system's default gateway.
eth0ip dhcp client (disable|enable|renew)This command configures a DHCP client function for the system."Disable": Use a static IP address for the switch."Enable & Renew": Use the DHCP client to get an IP address from the DHCP server.
eth0management vlan VLAN_IDThis command configures the management VLAN.

10.3.2.2 Jumbo Frame

Table 127: CLI "Jumbo Frame" Configuration

NodeCommandDescription
enableshow jumboframeThis command displays the current jumbo frame settings.
configurejumboframe(10240|1522|1536|1552|9216)This command configures the maximum number of bytes for frame sizes.

10.3.2.3 SNTP

Table 128: CLI "SNTP" Configuration

NodeCommandDescription
enableshow timeThis command displays the current time and date configuration.
configuretime HOUR:MINUTE:SECONDThis command sets the current time of the switch.hour: 0-23min: 0-59sec: 0-59Note: If you configure daylight saving time after you configure the date and time, the switch uses daylight saving time.
configuretime date YEAR/MONTH/DAYThis command sets the current date of the switch.year: 1970-month: 1-12day: 1-31
configuretime daylight-saving-timeThis command enables the daylight saving time.
configureno time daylight-saving-timeThis command disables daylight saving time on the switch.
configuretime daylight-saving-time start-date (first | second | third | fourth | last)(Sunday | Monday | Tuesday | Wednesday | Thursday | Friday | Saturday) MONTH HOURThis command sets the start date of daylight saving time.
configuretime daylight-saving-time end-date (first | second | third | fourth | last)(Sunday | Monday | Tuesday | Wednesday | Thursday | Friday | Saturday) MONTH HOURThis command sets the end date of daylight saving time.
configuretime ntp-server (disable|enable)This command disables/enables the NTP server settings.
configuretime ntp-server IP_ADDRESSThis command sets the IP address of the time server.
configuretime ntp-server domain-name STRINGThis command sets the domain names of the time server.
configuretime timezone STRINGThis command sets the time difference between UTC (formerly GMT) and the time zone.Valid range: -1200 ... +1200

Example

L2SWITCH(config)#time ntp-server 192.5.41.41

L2SWITCH(config)#time timezone +0800

L2SWITCH(config)#time ntp-server enable

L2SWITCH(config)#time daylight-saving-time start-date first Monday 6 0

L2SWITCH(config)#time daylight-saving-time end-date last Saturday 10 0

10.3.2.4 Management Host

Table 129: CLI "Management Host" Configuration

NodeCommandDescription
enableshow interface eth0The command displays all eth0 interface configurations.
eth0showThe command displays all eth0 interface configurations.
eth0management host A.B.C.DThe command adds a management host address.
eth0no management host A.B.C.DThe command deletes a management host address.

Example

L2SWITCH#configure terminal

L2SWITCH(config)#interface eth0

L2SWITCH(config-if)#management host 192.168.200.106

10.3.2.5 MAC Management

Table 130: CLI "MAC Management" Configuration

NodeCommandDescription
enableshow mac-address-table aging-timeThis command displays the current “Age Time” for the MAC address table.
enableshow mac-address-table (static|dynamic)This command displays the current static/dynamic unicast address entries.
enableshow mac-address-table mac MACADDRThis command displays information of a specific MAC address table.
enableshow mac-address-table port PORT_IDThis command displays the current unicast address entries recognized by the specific port.
configuremac-address-table static MACADDR vlan VLANID port PORT_IDThis command configures a static unicast entry.
configureno mac-address-table static MACADDR vlan VLANIDThis command deletes a static unicast entry from the address table.
configuremac-address-table aging-time VALUEThis command configures the MAC table “Age Time.”
configureclear mac address-table dynamicThis command deletes the dynamic address entries.

Example

L2SWITCH(config)#mac-address-table static 00:11:22:33:44:55 vlan 1 port 1

10.3.2.6 Blackhole MAC

Table 131: CLI "Blackhole MAC" Configuration

NodeCommandDescription
enableshow mac-address-table refusalThis command displays the current rejected MAC address only.
configuremac-address-table refusal MACADDR vlan VLANIDThis command configures the rejection of a MAC address in a specific VLAN.
configuremac-address-table refusal MACADDRThis command configures the rejection of a MAC address.

Example

L2SWITCH(config)#mac-address-table static 00:11:22:33:44:55 vlan 1 port 1

10.3.2.7 Port Mirroring

Table 132: CLI "Port Mirroring" Configuration

NodeCommandDescription
enableshow mirrorThis command displays the current “Port Mirroring” configurations.
configuremirror (disable|enable)This command disables/enables “Port Mirroring” on the switch.
configuremirror destination port PORT_IDThis command specifies the monitor port for the port mirroring.
configuremirror source ports PORT_LIST mode (both|ingress|egress)This command adds a port or a range of ports as the source ports of the port mirroring.
configureno mirror source ports PORT_LISTThis command removes a port or a range of ports from the source ports of the port mirroring.

Example

L2SWITCH#configure terminal

L2SWITCH(config)#mirror enable

L2SWITCH(config)#mirror destination port 2

L2SWITCH(config)#mirror source ports 3-10 mode both

10.3.2.8 Port Settings:

Table 133: CLI "Port Settings" Configuration

NodeCommandDescription
enableshow interface IFNAMEThis command displays the current port configurations.
interfaceshowThis command displays the current port configurations.
interfaceloopback (none | phy)This command specifies the “Loopback” mode for a specific port.
interfaceflowcontrol (off | on)This command disables/enables the “Flow Control” for a port.
interfacespeed (auto|10-full||10-half|100-full|100-half)This command configures the speed and duplex mode for a port.
interfaceshutdownThis command disables a specific port.
interfaceno shutdownThis command enables a specific port.
interfaceloopback (none|mac)This command tests the transmission or data transport infrastructure.

Example

L2SWITCH#configure terminal

L2SWITCH(config)#interface fa1/0/1

L2SWITCH(config-if)#speed auto

L2SWITCH#show interface fastethernet1/0/1

10.3.3 Advanced Settings

10.3.3.1 Bandwidth Control

10.3.3.2 QoS

Table 134: CLI "QoS" Configuration

NodeCommandDescription
enableshow queue cos-mapThis command displays the current 802.1p priority mapping to the “Service Queue.”
enableshow qos modeThis command displays the current IEEE 802.1p QoS mode.
configurequeue cos-map PRIORITY QUEUE_IDThis command configures the 802.1p priority mapping of the “Service Queue.”
configureno queue cos-mapThis command configures the default settings for the 802.1p priority mapping of the “Service Queue.”
configureqos mode high-firstThis command sets the QoS mode to “high_first” so every “Hardware Queue” transmits all packets in its buffer before permitting the next lower priority queue to transmit its packets.
configureqos mode wrr-queue weights VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE Value VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE VALUE NAME VALUE NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME Name NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAME NAMEThis command sets the QoS mode to “high_first” so every “Hardware Queue” transmits all packets in its buffer before permitting the next lower priority queue to transmit its packets.
interfacedefault-priorityThis command allows the user to specify which priority is assigned by default to the untagged packets received by the switch. The priority value entered with this command is used to determine which of the “Hardware Priority Queues” the packet is forwarded to. Default: 0.
interfaceno default-priorityThis command sets the default priority for the specific port to 0.

10.3.3.3 Rate Limitation

Table 135: CLI "Rate Limitation" Configuration

NodeCommandDescription
enableshow bandwidth-limitThis command displays the current “Rate Limitation” configurations.
configurebandwidth-limit egress RATE_LIMIT ports PORTLISTSThis command enables the rate limitation for outgoing packets and sets the limit.
configureno bandwidth-limit egress ports PORTLISTSThis command disables the rate limitation for outgoing packets.
configurebandwidth-limit ingress RATE_LIMIT ports PORTLISTSThis command enables the rate limitation for incoming packets and sets the limit.
configureno bandwidth-limit ingress ports PORTLISTSThis command disables the rate limitation for incoming packets.

Example

L2SWITCH#configure terminal

L2SWITCH(config)#bandwidth-limit egress 1 ports 1-8

L2SWITCH(config)#bandwidth-limit ingress 1 ports 1-8

10.3.3.4 Storm Control

Table 136: CLI "Storm Control" Configuration

NodeCommandDescription
enableshow storm-controlThis command displays the current “Storm Control” configurations.
configurestorm-control rate RATE_LIMIT type (bcast | mcast | DLF | bcast+mcast | bcast+DLF | mcast+DLF | bcast+mcast+DLF) ports PORTLISTSThis command enables the rate limitation for broadcast, multicast or DLF packets and sets the rate limitation for a specified type.
configureno storm-control type (bcast | mcast | DLF | bcast+mcast | bcast+DLF | mcast+DLF | bcast+mcast+DLF) ports PORTLISTSThis command disables the rate limitation for broadcast, multicast or DLF packets.

Example

L2SWITCH#configure terminal

L2SWITCH(config)#storm-control rate 1 type broadcast ports 1-6

L2SWITCH(config)#storm-control rate 1 type multicast ports 1-6

L2SWITCH(config)#storm-control rate 1 type DLF ports 1-6

10.3.3.5 IGMP Snooping

Table 137: CLI "IGMP Snooping" Configuration

NodeCommandDescription
enableshow igmp-snoopingThis command displays the current “IGMP Snooping” configurations.
configureigmp-snooping (disable | enable)This command disables/enables “IGMP Snooping” on the switch.
configureigmp-snooping vlan VLAN_IDThis command enables “IGMP Snooping” on a VLAN or VLAN range.
configureno igmp-snooping vlan VLAN_IDThis command disables “IGMP Snooping” on a VLAN or VLAN range.
configureigmp-snooping querier (disable | enable)This command disables/enables the “IGMP Snooping Querier” on the switch.
configureigmp-snooping querier vlan VLAN_IDThis command enables the “IGMP Snooping Querier” function on a VLAN or VLAN range.
configureno igmp-snooping querier vlan VLAN_IDThis command disables the “IGMP Snooping Querier” function on a VLAN or VLAN range.
configureigmp-snooping unknown-multicast (drop|flooding)This command configures the process for unknown multicast packets when the “IGMP Snooping” function is enabled.drop: All unknown multicast packets are dropped.
configureigmp-snooping report-suppression (disable|enable)This command disables/enables the “IGMP Snooping Report Suppression” function on the switch.
interfaceigmp-querier-mode (auto | fixed | edge)This command specifies if and under what conditions the ports are “IGMP Query Ports.”The switch forwards the “IGMP Join/Leave” packets to an “IGMP Query Port,” treating the port as if it were connected to an IGMP multicast router (or server).“IGMP Snooping” must also be enabled (default: “Auto”).
interfaceigmp-immediate-leaveThe command enables the “Immediate Leave” function for “IGMP Snooping” for a specific interface.
interfaceno igmp-immediate-leaveThe command disables the “Immediate Leave” function for “IGMP Snooping” for a specific interface.

Example

L2SWITCH(config)#igmp-snooping enable

L2SWITCH(config)#igmp-snooping vlan 1

L2SWITCH(config)#igmp-snooping querier enable

L2SWITCH(config)#igmp-snooping querier vlan 1

L2SWITCH(config)#interface 1/0/1

L2SWITCH(config-if)#igmp-immediate-leave

L2SWITCH(config-if)# igmp-querier-mode fixed

10.3.3.6 MVR

Table 138: CLI "MVR" Configuration

NodeCommandDescription
enableshow mvrThis command displays the current MVR configurations.
enableshow mvr vlan VLANIDThis command displays the current MVR configurations of the specific VLAN.
enableshow igmp-snoopingThis command displays the current “IGMP Snooping” configurations.
configuremvr VLANIDThis command creates the MVR configurations for the specific VLAN.
configureno mvr VLANIDThis command disables the MVR configurations for the specific VLAN.
MVRgroup NAMEThis command creates a group configuration for the MVR.
MVRno group NAMEThis command deletes the group configurations from the MVR.
MVRinactiveThis command disables the MVR settings.
MVRno inactiveThis command enables the MVR settings.
MVRmode (dynamic | compatible)This command configures the mode for the MVR.- Dynamic: Sends “IGMP reports” to all MVR source ports in the multicast VLAN.- Compatibility: The switch does not send any “IGMP Reports.”
MVRname STRINGThis command configures the name for the MVR.
MVRno nameThis command configures the default name for the MVR.
MVRreceiver-port PORTLISTThis command sets the receiver port or receiver port range. Normally, the source ports are connected to the streaming client.
MVRno receiver-port PORTLISTThis command removes a port or range of ports from the list of receiver ports.
MVRsource-port PORTLISTThis command sets the source port or source port range. Normally, the source ports are connected to the streaming server.
MVRno source-port PORTLISTThis command removes a port or range of ports from the list of source ports.
MVRtagged PORTLISTThis command assigns a tagged port or port range. The same applies to VLAN tagged ports.
MVRno tagged PORTLIST

10.3.3.7 Multicast Address

Table 139: CLI "Multicast Address" Configuration

NodeCommandDescription
enableshow mac-address-table multicastThis command displays the current static/dynamic multicast address entries.
configuremac-address-table multicast MACADDR vlan VLAN_ID ports PORTLISTThis command configures a static multicast entry.
configureno mac-address-table multicast MACADDRThis command deletes a static multicast entry from the address table.

10.3.3.8 VLAN

10.3.3.8.1 Port Isolation

Table 140: CLI "Port Isolation" Configuration

NodeCommandDescription
enableshow port-isolationThis command displays the current “Port Isolation” configurations.“V” indicates that the port’s packets can be sent to this port.“-” indicates that the port’s packets cannot be sent to this port.
interfaceport-isolation ports PORTLISTSThis command configures a port or a range of ports to forward traffic from a specific port.
interfaceno port-isolationThis command configures all ports to forward data packets from a specific port.

Example

L2SWITCH(config)#interface 1/0/2

L2SWITCH(config-if)#port-isolation ports 3-10

10.3.3.8.2 VLAN Settings

Table 141: CLI "VLAN Settings" Configuration

NodeCommandDescription
enableshow vlan VLANIDThis command displays the VLAN configurations.
configurevlan <1-4094>This command enables a VLAN and enters the VLAN node.
configureno vlan <1-4094>This command deletes a VLAN.
vlanshowThis command displays the current VLAN configurations.
vlanname STRINGThis command assigns a name for the specific VLAN. The VLAN name should be a combination of numbers, letters, hyphens (-) and underscores (_). The maximum length of the name is 16 characters.
vlanno nameThis command resets the VLAN name to the default setting.Note: The default VLAN name is comprised as follows: “VLAN”+VLAN_ID, VLAN1, VLAN2, ...
vlanfixed PORT_LISTThis command assigns ports to a VLAN group as fixed subscribers.
vlanno fixedThis command deletes all fixed ports from a VLAN.
vlantagged PORT_LISTThis command assigns fixed ports to a VLAN group as tagged subscribers. The port(s) should be a fixed subscriber of the VLAN group.
vlanno taggedThis command deletes all permanently assigned tagged ports from a VLAN.
vlanuntagged PORT_LISTThis command assigns fixed ports to a VLAN group as untagged subscribers. The port(s) should be a fixed subscriber of the VLAN group.
vlanno untaggedThis command deletes all untagged ports from a VLAN.
vlanacceptable frame type (all | tagged | untagged)This command configures the permissible frame type.

Example

L2SWITCH#configure terminal

L2SWITCH(config)#vlan 2

L2SWITCH(config-vlan)#fixed 1-6

L2SWITCH(config-vlan)#untagged 1-3

10.3.3.9 GARP/GVRP

Table 142: CLI "GARP/GVRP" Configuration

NodeCommandDescription
enableshow gvrp configurationThis command displays the GVRP configurations.
enableshow gvrp statisticsThis command displays the GVRP configurations for one port or all ports.
enableshow garp timerThis command displays the timers for GARP.
configuregvrp (disable | enable)This command disables/enables GVRP on the switch.
configureno gvrp configurationThis command resets the GVRP configuration to the default setting.
interfacegvrp (disable | enable)This command disables/enables GVRP on a specific port.
interfacegvrp registration (normal | forbidden)This command configures the registration mode for GVRP on a specific port.
interfaceno gvrp configurationThis command resets the GVRP configuration for a specific port to the default setting.
interfacegarp join-time VALUE leave-time VALUE leaveall-time VALUEThis command configures the “Join Time,” “Leave Time” and “Leaveall Time” for GVRP on a specific port.
interfaceno garp timeThis command resets the Join, Leave and Leaveall times for GVRP on a specific port to the default settings.

10.3.3.10 Q-in-Q

10.3.3.10.1 VLAN Stacking

Table 143: CLI "VLAN Stacking" Configuration

NodeCommandDescription
enableshow vlan-stackingThis command displays the current “VLAN Stacking” type.
enableshow vlan-stacking selective-qinqThis command displays the selective Q-in-Q configurations.
enableshow vlan-stacking portbased-qinqThis command displays the port-based Q-in-Q configurations.
enableshow vlan-stacking tpid-informThis command displays the TPID configurations.
configvlan-stacking (disable | port-based | selective)This command disables “VLAN Stacking” or enables port-based or selective “VLAN Stacking” on the switch.
configvlan-stacking selective-qinq STRINGSThis command creates a selective Q-in-Q profile by name.
configno vlan-stacking selective-qinq STRINGSThis command deletes a selective Q-in-Q profile by name.
configvlan-stacking tpid-table index <2-6> value STRINGSThis command configures the TPID table.
interfacevlan-stacking port-based priority <0-7>This command sets the priority in the port-based Q-in-Q.
interfacevlan-stacking port-based role (tunnel | access | normal)This command sets the “VLAN Stacking” port role.
interfacevlan-stacking port-based spvid <1-4096>This command sets the service provider VID of the specified port.
interfacevlan-stacking tunnel-tpid index <1-6>This command sets the TPID for a “Q-in-Q Tunnel Port.”
qinqactiveThis command enables the selective Q-in-Q profile.
qinqinactiveThis command disables the selective Q-in-Q profile.
qinqcvid VLANIDThis command specifies the service provider's VLAN range for incoming packets.
qinqspvid VLANIDThis command specifies the service provider's VLAN range for outgoing packets in the selective Q-in-Q.
qinqpriority <0-7>This command sets the priority in the selective Q-in-Q.
qinqaccess-ports PORTLISTSThis command specifies the “Access Ports” that should apply the rules.
qinqtunnel-ports PORTLISTSThis command specifies the “Tunnel Ports” that should apply the rules.
qinqendThe command exits the “CLI Q-in-Q” node and enables the “CLI enable” node.
qinqexitThe command exits the “CLI Q-in-Q” node and enables the “CLI configure” node.
qinqshowThe command displays the current configurations of the Q-in-Q profile.

10.3.3.11 DHCP Relay

Table 144: CLI "DHCP Relay" Configuration

NodeCommandDescription
enableshow dhcp relayThis command displays the current configurations for the “DHCP Relay.”
configuredhcp relay (disable | enable)This command disables/enables the “DHCP Relay” on the switch.
configuredhcp relay vlan VLAN_RANGEThis command enables the “DHCP Relay” function for a VLAN or a VLAN range.
configureno dhcp relay vlan VLAN_RANGEThis command disables the “DHCP Relay” function for a VLAN or a VLAN range.
configuredhcp helper-address IP_ADDRESSThis command configures the IP address of the DHCP server.
configureno dhcp helper-addressThis command deletes the IP address of the DHCP server.
configuredhcp option82 (disable | enable)This command disables/enables the “DHCP Relay Option 82” function on the switch.
configuredhcp option82 information STRINGThis command configures the information for the “DHCP Relay Option 82” function.
configureno dhcp option82 informationThis command deletes the information for the “DHCP Relay Option 82” function.

Example

L2SWITCH#configure terminal

L2SWITCH(config)# interface eth0

L2SWITCH(config-if)# ip address 172.20.1.101/24

L2SWITCH(config-if)# ip address default-gateway 172.20.1.1

L2SWITCH(config)#dhcp relay enable

L2SWITCH(config)# dhcp relay vlan 1

L2SWITCH(config)# dhcp helper-address 172.20.1.1

L2SWITCH(config)#dhcp option82 enable

L2SWITCH(config)#dhcp option82 information Justin

10.3.3.12 Dual Homing

Table 145: CLI "Dual Homing" Configuration

NodeCommandDescription
enableshow dual-homingThis command displays the “Dual Homing” information.
configuredual-homing (disable | enable)This command disables/enables the “Dual Homing” function in the system.
configureno dual-homing primary-channelThis command deletes the primary channel for “Dual Homing” from the system.
configureno dual-homing primary-channelThis command deletes the primary channel for “Dual Homing” from the system.
configuredual-homing secondary-channel (port | trunk) VALUEThis command configures the secondary channel for “Dual Homing” in the system. The channel can be a single port or a “Trunk Group.”
configureno dual-homing secondary-channelThis command deletes the secondary channel for “Dual Homing” from the system.

Example

L2SWITCH(config)# link-aggregation 1 ports 5-6

L2SWITCH(config)# link-aggregation 1 enable

L2SWITCH(config)# dual-homing primary-channel port 2

L2SWITCH(config)# dual-homing secondary -channel trunk 1

L2SWITCH(config)# dual-homing enable

Table 146: CLI "Link Aggregation" Configuration

NodeCommandDescription
enableshow link-aggregationThe command displays the current configuration for “Trunking.”
configurelink-aggregation [GROUP_ID] (disable | enable)The command disables/enables “Trunking” for the specific “Trunk Group.”
configurelink-aggregation [GROUP_ID] interface PORTLISTSThe command adds ports to a specific “Trunk Group.”
configureno link-aggregation [GROUP_ID] interface PORTLISTSThe command deletes ports from a specific “Trunk Group.”

10.3.3.14 LACP

Table 147: CLI "LACP" Configuration

NodeCommandDescription
enableshow trunkThe command displays the current configuration for “Trunking.”
enableshow lacp counters [GROUP_ID]This command displays the LACP counters for the specific group or all groups.
enableshow lacp internal [GROUP_ID]This command displays internal LACP information for the specific group or all groups.
enableshow lacp neighbor [GROUP_ID]This command displays the LACP neighbor information for the specific group or all groups.
enableshow lacp port_priorityThis command displays the port priority for LACP.
enableshow lacp sys_idThis command displays the system ID for the “LACP Actor” and “LACP Partner.”
configureLacp (disable | enable)This command disables/enables LACP on the switch.
configureLacp GROUP_ID (disable | enable)This command disables/enables LACP for a specific “Trunk Group.”
configureclear lacp counters [PORT_ID]This command clears the LACP statistics for a specific port or all ports.
configurelacp system-priority <1-65535>This command configures the system priority for LACP. Note: The default value is 32768.
configureno lacp system-priorityThis command configures the default setting for system priority for LACP.
interfacelacp port_priority <1-65535>This command configures the priority for the specific port.
interfaceno lacp port_priorityNote: The default value is 32768.

10.3.3.15 LLDP

Table 148: CLI "LLDP" Configuration

NodeCommandDescription
enableshow lldpThis command displays the LLDP configurations.
enableshow lldp neighborThis command displays all the information of the port neighbors.
configurelldp (disable | enable)This command globally enables/disables the LLDP function on the switch.
configurelldp tx-intervalThis command configures the transmission interval for LLDP packets.
configurelldp tx-holdThis command configures the “tx-Hold Time” that determines the TTL of the switch message. (TTL = tx-hold * tx-interval)
interfacelldp-agent (disable | enable | rx-only | tx-only)This command configures the Agent function for LLDP.“disable”: LLDP is disabled for a specific port.“enable”: The LLDP packet is transmitted on a specific port and received.“tx-only”:The LLDP packet is only transmitted on a specific port.“rx-only”: The LLDP packet is only received on a specific port.

10.3.3.16 Loop Detection

Table 149: CLI "Loop Detection" Configuration

NodeCommandDescription
enableshow loop-detectionThis command displays the current configuration for “Loop Detection.”
configureloop-detection (disable | enable)This command disables/enables “Loop Detection” on the switch.
configureloop-detection address MACADDRThis command configures the destination MAC address for special “Loop Detection” packets.
configureno loop-detection addressThis command resets the destination MAC address to the default setting (00:0b:04:AA:AA:AB).
interfaceloop-detection (disable | enable)This command disables/enables “Loop Detection” for a specific port.
interfaceno shutdownThis command enables a specific port. It can enable a port blocked by “Loop Detection.”
interfaceloop-detection recovery (disable | enable)This command enables/disables the “Recovery” function on a port.
interfaceloop-detection recovery time VALUEThis command configures the “Recovery Time” period.

Example

L2SWITCH(config)#loop-detection enable

L2SWITCH(config)#interface 1/0/1

L2SWITCH(config-if)#loop-detection enable

L2SWITCH(config-if)#loop-detection recovery enable

L2SWITCH(config-if)#loop-detection recovery time 10

10.3.3.17 STP

Table 150: CLI "STP" Configuration

NodeCommandDescription
enableshow spanning-tree activeThis command only displays STP information for active ports.
enableshow spanning-tree blockedportsThis command only displays STP information for blocked ports.
enableshow spanning-tree port detail PORT_IDThis command displays the spanning tree information for the interface port.
enableshow spanning-tree statistics PORT_IDThis command displays the spanning tree information for the interface port.
enableshow spanning-tree summaryThis command displays a summary of the port states and configurations
enableclear spanning-tree countersThis command clears the STP statistics for all ports.
enableclear spanning-tree counters PORT_IDThis command clears the STP statistics for a specific port.

Table 150: CLI "STP" Configuration

NodeCommandDescription
configurespanning-tree (disable | enable)This command disables/enables the STP function in the system.
configurespanning-tree algorithm-timer forward-time TIME max-age TIME hello-time TIMEThis command configures the bridge times ("Forward Delay," "Max Age," "Hello Time").
configureno spanning-tree algorithm-timerThis command configures the default values for "Forward Delay," "Max Age" and "Hello Time."
configurespanning-tree forward-time <4-30>This command configures the "Forward Delay" period (in seconds) for the bridge.
configureno spanning-tree forward-timeThis command configures the default values for "Forward Delay."
configurespanning-tree hello-time <1-10>This command configures the "Hello Time" period (in seconds) for the bridge.
configureno spanning-tree hello-timeThis command configures the default values for the "Hello Time."
configurespanning-tree max-age <6-40>This command configures the "Max Age" period (in seconds) for bridge messages.
configureno spanning-tree max-ageThis command configures the default values for the "Max Age."
configurespanning-tree mode (rstp | stp)This command configures the STP mode.
configurespanning-tree pathcost method (short | long)This command configures the path cost method.
configurespanning-tree priority <0-61440>This command configures the priority for the system.
configureno spanning-tree priorityThis command configures the default values for the system priority.
interfacespanning-tree bpdufilter (disable | enable)This command configures enables/disables the "BPDU Filter" function.
interfacespanning-tree bpduguard (disable | enable)This command configures enables/disables the "BPDU Guard" function.
interfacespanning-tree edge-port (disable | enable)This command enables/disables the "Edge Port" setting.
interfacespanning-tree cost VALUEThis command configures the costs for the specific port.Cost range:16-bit-based value range of 1 to 65,535,32-bit-based value range of 1 to 200,000,000.
interfaceno spanning-tree costThis command sets the path cost of the specific port to the default value.
interfacespanning-tree port-priority <0-240>This command configures the port priority for the specific port.Default value: 128.
interfaceno spanning-tree port-priorityThis command sets the priority of the specific port to the default value.

10.3.3.18 Xpress Ring

Table 151: CLI "Xpress Ring" Configuration

NodeCommandDescription
enableshow xpress-ringThis command displays the current status of the Xpress ring.
configxpress-ring (disable | enable)This command enables/disables the Xpress ring function on the switch.
configxpress-ring role (forwarder | arbiter)This command configures the role (“Forwarder” or “Arbiter”) for the switch.
configxpress-ring ring-port1This command configures one port of the ring.
configxpress-ring ring-port2This command configures the other port of the ring.

10.3.4 Security

10.3.4.1 DHCP Snooping

Table 152: CLI "DHCP Snooping" Configuration

NodeCommandDescription
enableshow dhcp-snoopingThis command displays the current “DHCP Snooping” configurations.
configuredhcp-snooping (disable | enable)This command disables/enables “DHCP Snooping” on the switch.
configuredhcp-snooping vlan VLANIDThis command enables the “DHCP Snooping” function on a VLAN or VLAN range.
configureno dhcp-snooping vlan VLANIDThis command disables the “DHCP Snooping” function on a VLAN or VLAN range.
configuredhcp option82 (disable | enable)This command disables/enables the “DHCP Relay Option 82” function.
configuredhcp option82 information STRINGThis command configures the information for the “DHCP Relay Option 82” function.
configureno dhcp option82 informationThis command deletes the information for the “DHCP Relay Option 82” function.
interfacedhcp-snooping hostThis command configures the maximum host count for the specific port.
interfaceno dhcp-snooping hostThis command sets the maximum host count for the specific port to the default value.
interfacedhcp-snooping trustThis command configures the “Trusted Port” for the specific port.
interfaceno dhcp-snooping trustThis command configures the “Untrusted Port” for the specific port.

Example

L2SWITCH#configure terminal

L2SWITCH(config)#dhcp-snooping enable

L2SWITCH(config)#dhcp-snooping vlan 1

L2SWITCH(config)#interface 1/0/1

L2SWITCH(config-if)#dhcp-snooping trust

L2SWITCH(config)#dhcp option82 enable

L2SWITCH(config)#dhcp option82 information Test01

10.3.4.2 Server Screening

Table 153: CLI "Server Screening" Configuration

NodeCommandDescription
enableshow dhcp-snooping serverThis command displays the IP address of the valid DHCP server.
configuredhcp-snooping serverIPADDRThis command configures the IP address of a valid DHCP server.
configureno dhcp-snooping serverIPADDRThis command deletes the IP address of a valid DHCP server.

10.3.4.3 Binding Table

Table 154: CLI "Binding Table" Configuration

NodeCommandDescription
enableshow dhcp-snooping bindingThis command displays the current “DHCP Snooping” binding table.
configuredhcp-snooping binding mac MAC_ADDR ip IP_ADDR vlan VLANID port PORT_NOThis command configures a static host in the “DHCP Snooping” binding table.
configureno dhcp-snooping binding mac MACADDRThis command deletes a static host from the “DHCP Snooping” binding table.

Example

L2SWITCH#configure terminal

L2SWITCH(config)#dhcp-snooping binding mac 00:11:22:33:44:55 ip 1.1.1.1 vlan 1 port 2

L2SWITCH(config)#no dhcp-snooping binding mac 00:11:22:33:44:55

L2SWITCH#show dhcp-snooping binding

10.3.4.4 ARP Inspection

Table 155: CLI "ARP Inspection" Configuration

NodeCommandDescription
enableshow arp-inspectionThis command displays the current configurations for the ARP Inspection.
configurearp-inspection (disable | enable)This command disables/enables the ARP Inspection function on the switch.
configurearp-inspection vlan VLANIDThis command enables the ARP Inspection function on a VLAN or VLAN range.
configureno arp-inspection vlan VLANIDThis command disables the ARP Inspection function on a VLAN or VLAN range.
interfacearp-inspection trustThis command configures the “Trusted Port” for the specific port.
interfaceno arp-inspection trustThis command configures the “Untrusted Port” for the specific port.

Example

L2SWITCH#configure terminal

L2SWITCH(config)#arp-inspection enable

L2SWITCH(config)#arp-inspection vlan 1

L2SWITCH(config)#interface 1/0/1

L2SWITCH(config-if)#arp-inspection trust

10.3.4.5 Filter Table

Table 156: CLI "Filter Table" Configuration

NodeCommandDescription
enableshow arp-inspection mac-filterThis command displays the current MAC address filter for the ARP Inspection.
configurearp-inspection mac-filter age VALUEThis command configures the “Age Time” for the MAP address filter entries of the ARP Inspection.
configureno arp-inspection mac-filter mac MACADDRThis command deletes a MAC address filter entry from the MAC filter table of the ARP Inspection.

10.3.4.6 Access Control List

Table 157: CLI "Access Control List" Configuration

NodeCommandDescription
enableshow access-listThis command displays all access control profiles.
configureaccess-list STRINGThis command creates a new access control profile,where “STRING” is the profile name.
configureno access-list STRINGThis command deletes an access control profile.
aclshowThis command displays the current access control profile.

Table 157: CLI "Access Control List" Configuration

NodeCommandDescription
aclaction (disable | drop | permit)This command processes this profile. “disable”: The profile is disabled. “drop”: If packets match the profile, they are dropped. “permit”: If packets match the profile, they are forwarded.
acldestination mac host MACADDRThis command configures the destination MAC address and the mask for the profile.
acldestination mac MACADDR MACADDRThis command configures the destination MAC address and the mask for the profile.
acldestination mac MACADDR MACADDRThis command configures the destination MAC address and the mask for the profile. The second “MACADDR” parameter is the mask (e.g., ffff.ffff.0000) for the profile.
aclno destination macThis command deletes the destination MAC address from the profile.
aclethertype STRINGThis command configures the ETHERNET type for the profile, where the “STRING” is a hexadecimal value, e.g., 08AA.
aclno ethertypeThis command deletes the ETHERNET type limit from the profile.
aclsource mac host MACADDRThis command configures the source MAC address and the mask for the profile.
aclsource mac MACADDR MACADDRThis command configures the source MAC address and the mask for the profile.
aclno source macThis command deletes the source MAC and the mask from the profile.
aclsource ip host IPADDRThis command configures the source IP address for the profile.
aclsource ip IPADDR IPMASKThis command configures the source IP address and the mask for the profile.
aclno source ipThis command deletes the source IP address from the profile.
acldestination ip host IPADDRThis command configures a specific destination IP address for the profile.
acldestination ip IPADDR IPMASKThis command configures the destination IP address and the mask for the profile.
aclno destination ipThis command deletes the destination IP address from the profile.
aclI4-source-port IPADDRThis command configures the UDP/TCP source port for the profile.
aclno I4-source-port IPADDRThis command removes the UDP/TCP source port from the profile.
aclL4-destination-port PORTThis command configures the UDP/TCP destination port for the profile.
aclno I4-destination-portThis command removes the UDP/TCP destination port from the profile.
aclvlan VLANIDThis command configures the VLAN for the profile.
aclno vlanThis command deletes the VLAN limit from the profile.
aclsource interface PORT_IDThis command configures the source interface for the profile.
aclno source interface PORT_IDThis command deletes the source interface from the profile.

10.3.4.7 802.1X

Table 158: CLI "802.1X" Configuration

NodeCommandDescription
enableshow dot1xThis command displays the current 802.1X configurations.
enableshow dot1x usernameThis command displays the current user accounts for local authentication.
enableshow dot1x accounting-recordThis command displays the local accounting records.
configuredot1x authentication (disable | enable)This command enables/disables 802.1X authentication on the switch.
configuredot1x authentic-method (local | radius)This command configures the 802.1X authentication method.
configureno dot1x authentic-methodThis command sets the 802.1X authentication method to the default setting.
configuredot1x radius primary-server-ipport PORTIDThis command configures the primary RADIUS server.
configuredot1x radius primary-server-ipport PORTID key KEYThis command configures the primary RADIUS server.
configuredot1x radius secondary-server-ipport PORTIDThis command configures the secondary RADIUS server.
configuredot1x radius secondary-server-ipport PORTID key KEYThis command configures the secondary RADIUS server.
configureno dot1x radius secondary-server-ipThis command deletes the secondary RADIUS server.
configuredot1x usernamepasswdThis command configures the user account for local authentication.
configureno dot1x usernameThis command deletes the user account for local authentication.
configuredot1x accounting (disable|enable)This command enables/disables the local .1x accounting records.
configuredot1x guest-vlan VLANIDThis command configures the guest VLAN.
configureno dot1x guest-vlanThis command deletes the guest VLAN.
interfacedot1x admin-control-direction (both|in)This command configures the control direction for blocking packets.
interfacedot1x defaultThis command resets the port configuration to default settings.
interfacedot1x max-req <1-10>This command sets the “Max Req Times” of a port (1 to 10).
interfacedot1x port-control (auto | force-authorized | force-unauthorized)This command configures the port control mode for the port.
interfacedot1x authentication (disable | enable)This command enables/disables 802.1X authentication on the port.
interfacedot1x reauthentication (disable | enable)This command enables/disables the authentication interval on the port.
interfacedot1x timeout quiet-periodThis command configures the “Quiet Period” value on the port.
interfacedot1x timeout server-timeoutThis command configures the server timeout value on the port.

Table 158: CLI "802.1X" Configuration

NodeCommandDescription
interfacedot1x timeout reauth-periodThis command configures the authentication interval value on the port.
interfacedot1x timeout supp-timeoutThis command configures the supplicant timeout value on the port.
interfacedot1x guest-vlan (disable | enable)This command configures the 802.1X state on the port.

10.3.4.8 Port Security

Table 159: CLI "Port Security" Configuration

NodeCommandDescription
enableshow port-securityThis command displays the current port security configurations.
configport-security (disable | enable)This command enables/disables the global port security function.
interfaceport-security (disable | enable)This command enables/disables the port security function on the specific port.
interfaceport-security limit VALUEThis command configures the maximum number of MAC address entries for the specific port.

10.3.5 Monitor

10.3.5.1 Alarm

Table 160: CLI "Alarm" Configuration

NodeCommandDescription
enableshow alarm-infoThis command displays alarm information.

10.3.5.2 Monitor Information

Table 161: CLI "Monitor Information" Configuration

NodeCommandDescription
enableshow hardware-monitor (C|F)This command displays hardware operation information.

10.3.5.3 RMON Statistics

Table 162: CLI "RMON Statistics" Configuration

NodeCommandDescription
enableshow rmon statisticsThis command displays the RMON statistics.
configureclear rmon statistics [IFNAME]This command clears the RMON statistics for one or all ports.

10.3.5.4 SFP Information

Table 163: CLI "SFP Information" Configuration

NodeCommandDescription
enableshow sfp info port PORT_IDThis command displays the SFP information.
enableshow sfp ddmi port PORT_IDThis command displays the SFP DDMI status.

10.3.5.5 Traffic Monitor

Table 164: CLI "Traffic Monitor" Configuration

NodeCommandDescription
enableshow traffic-monitorThis command displays the “Traffic Monitor” configurations and current status.
configuretraffic-monitor (disable | enable)This command enables/disables the “Traffic Monitor” on the switch.
interfacetraffic-monitor rate RATE_LIMIT type (bcast | mcast | bcast+mcast)This command configures the packet rate and type for the “Traffic Monitor” on a specific port.mcast: broadcast packetmcast: multicast packetThe rate should be greater than 50 pps.
interfacetraffic-monitor (disable | enable)This command enables/disables the “Traffic Monitor” on a specific port.
interfacetraffic-monitor recovery (disable | enable)This command enables/disables the “Recover” function for the “Traffic Monitor” on a specific port.
interfacetraffic-monitor recovery time VALUEThis command configures the “Recovery Time” for the “Traffic Monitor” on a specific port.

10.3.6 Management

10.3.6.1 SNMP

Table 165: CLI "SNMP" Configuration

NodeCommandDescription
enableshow snmpThis command displays the SNMP configurations.
configuresnmp community STRING (ro | rw) trusted-host IPADDRThis command configures the “SNMP Community” name.
configuresnmp (disable | enable)This command disables/enables SNMP on the switch.
configuresnmp system-contact STRINGThis command configures contact information for the system.
configuresnmp system-location STRINGThis command configures the location information for the system.
configuresnmp system-name STRINGThis command assigns a name to the system.
configuresnmp trap-receiver IPADDR VERSION COMMUNITYThis command configures the trap receiver's configurations, including the IP address, version (v1 or v2c) and “Community.”

Example

L2SWITCH#configure terminal

L2SWITCH(config)#snmp enable

L2SWITCH(config)#snmp community public rw trusted-host 192.168.200.106/24

L2SWITCH(config)#snmp trap-receiver 192.168.200.106 v2c public

L2SWITCH(config)#snmp system-contact IT engineer

L2SWITCH(config)#snmp system-location Wago

10.3.6.2 Auto Provision

Table 166: CLI "Auto Provision" Configuration

NodeCommandDescription
auto-provisionshowThis command displays the current configurations for the “Auto Provision.”
auto-provisionactive (enable | disable)This command enables/disables the “Auto Provision” function.
auto-provisionserver-address IPADDRThis command sets the IP address of the server for the “Auto Provision.”
auto-provisionprotocol (tftp | http | ftp)The command configures the update protocol.
auto-provisionFTP-user username STRING password STRINGThe command configures the user name and password for the FTP server.
auto-provisionfolder STRINGThe command sets the folder for the “Auto Provision” server.
auto-provisionversion <0-65535>The command configures the version for “Auto Provision” on the switch.
auto-provisionno folderThe command resets the folder to the default setting.
auto-provisionno FTP-userThe command resets the user name and password to default setting.

10.3.6.3 Mail Alarm

Table 167: CLI "Mail Alarm" Configuration

NodeCommandDescription
enableshow mail-alarmThis command displays the “Mail Alarm” configurations.
configuremail-alarm (disable | enable)This command disables/enables the “Mail Alarm” function.
configuremail-alarm mail-fromThis command configures the e-mail sender.
configuremail-alarm mail-toThis command configures the e-mail receiver.
configuremail-alarm server-ipIPADDR server-port VALUEThis command configures the IP address and TCP port for the mail server.
configuremail-alarm server-ipIPADDR server-port DefaultThis command configures the IP address of the mail server and sets its TCP port to 25.
configuremail-alarm trap-event (reboot | link-change | config. | firmware | login | port-blocked)(disable|enable)This command disables/enables mail trap events.

10.3.6.4 Maintenance

Table 168: CLI "Maintenance" Configuration

NodeCommandDescription
configurerebootThis command reboots the system.
configurereload default-configThis command resets the system configuration to the default settings.Note: The system automatically reboots to apply the configurations.
configurewrite memoryThis command writes the current operating configurations to the configuration file.
configurearchive download-configcan be:ftp://user:pass@192.168.1.1/filehttp://192.168.1.1/filetftp://192.168.1.1/fileThis command downloads an updated configuration file from the TFTP server,wherecan be:ftp://user:pass@192.168.1.1/filehttp://192.168.1.1/filetftp://192.168.1.1/file
configurearchive upload-configThis command uploads the current configurations file to the TFTP server.
configurearchive download-fwcan be:ftp://user:pass@192.168.1.1/filehttp://192.168.1.1/filetftp://192.168.1.1/fileThis command downloads an updated firmware file from the TFTP/FTP/HTTP server,wherecan be:ftp://user:pass@192.168.1.1/filehttp://192.168.1.1/filetftp://192.168.1.1/file

Example

L2SWITCH#configure terminal

L2SWITCH(config)#interface eth0

L2SWITCH(config-if)#ip address 172.20.1.101/24

L2SWITCH(config-if)#ip address default-gateway 172.20.1.1

L2SWITCH(config-if)#management vlan 1

10.3.6.5 System Log

Table 169: CLI "System Log" Configuration

NodeCommandDescription
enableshow syslogThe command displays all log messages recorded in the switch.
enableshow syslog level LEVELThis command displays the log messages with the “LEVEL” recorded in the switch.
enableshow syslog serverThe command displays the syslog server configurations.
configuresyslog (disable | enable)The command disables/enables the syslog function.
configuresyslog ip IPADDRThe command configures the IP address of the syslog server.

Example

L2SWITCH#configure terminal

L2SWITCH(config)#syslog-server ip 192.168.200.106

L2SWITCH(config)#syslog-server enable

10.3.6.6 User Account

Table 170: CLI "System Log" Configuration

NodeCommandDescription
enableshow user accountThis command displays the current user accounts.
configureadd userUSER_ACCOUNTPASSWORD (normal | admin)This command adds a new user account.
configuredelete userUSER_ACCOUNTThe command deletes an existing user account.

Example

L2SWITCH#configure terminal

L2SWITCH(config)#add user q q admin

L2SWITCH(config)#add user 1 1 normal

10.4 MODBUS/TCP Tables

10.4.1 Data Format and Function Code

MODBUS TCP supports different types of data formats for reading. The four most important types are:

Table 171: Data Format and Function Code

Data Access TypeFunction CodeFunction NameNote
Bit accessPhysical Discrete Inputs2Read Discrete InputsNot supported.
Internal Bits or Physical Coils1Read CoilsNot supported.
Word access (16-bit access)Physical Input Registers4Read Input Registers
Physical Output3Read Holding RegistersNot supported.

10.4.2 MODBUS Register

The MODBUS address space of the industrial managed switches starts at 1000 (decimal) for function code 4.

Table 172: MODBUS Registers

Register AddressDate Length/WordFormatDescription
DecHex
System Information
10013E91HEXVendor ID = 0x30DE
10023EA16ASCIIVendor Name = “WAGO”
Word 0 Hi byte = ‘W’
Word 0 Lo byte = ‘A’
Word 1 Hi byte = ‘G’
Word 1 Lo byte = ‘O’
Word 2 Hi byte = '\0'
103340916ASCIIProduct Name = “852-1505”
Word 0 Hi byte = ‘8’
Word 0 Lo byte = ‘5’
Word 1 Hi byte = ‘2’
Word 1 Lo byte = ‘-’
Word 2 Hi byte = ‘1’
Word 2 Lo byte = ‘5’
Word 3 Hi byte = ‘0’
Word 3 Lo byte = ‘5’
Word 4 Hi byte = '\0’
Word 4 Lo byte = '\0’
10654297ASCIIProduct Serial Number
Ex: Serial No=A000000000001

Table 172: MODBUS Registers

Register AddressDate Length/WordFormatDescription
DecHex
System Information
108143912ASCIIFirmware Version= "V1.1.4.S0"
Word 0 Hi byte = 'V'
Word 0 Lo byte = '1'
Word 1 Hi byte = '.'
Word 1 Lo byte = '1'
Word 2 Hi byte = '.'
Word 2 Lo byte = '4'
Word 3 Hi byte = '.'
Word 3 Lo byte = 'S'
Word 4 Hi byte = '0'
Word 4 Lo byte = '\0'
Word 5 Hi byte = '\0'
Word 5 Lo byte = '\0'
Word 6 Hi byte = '\0'
Word 6 Lo byte = '\0'
Word 7 Hi byte = '\0'
Word 7 Lo byte = '\0'
Word 8 Hi byte = '\0'
Word 8 Lo byte = '\0'
109744916ASCIIFirmware Release Date = "Mon Sep 30 18:51:45 2013"
11134593HEXETHERNET MAC Address
Ex: MAC = 00-01-02-03-04-05
Word 0 Hi byte = 0 x 00
Word 0 Lo byte = 0 x 01
Word 1 Hi byte = 0 x 02
Word 1 Lo byte = 0 x 03
Word 2 Hi byte = 0 x 04
Word 2 Lo byte = 0 x 05
11294691HEXPower 1 (PWR) Alarm, DIP switch 1 need ON
0x0000: no alarm
0x0001: input voltage < 11.7V
0x0002: input voltage > 57V
0x0003: No PWR input
113046 A1HEXPower 2(RPS) Alarm, DIP switch 1 need ON
0x0000: no alarm
0x0001: input voltage < 11.7V
0x0002: input voltage > 57V
0x0003: No RPS input
11454791HEXFault LED Status
0x0000: No
0x0001: Yes

Table 172: MODBUS Registers

Register AddressDate Length/WordFormatDescription
DecHex
System Information
Port Information
1HEXPort 1 to 12 Link Status
0x0000: Link down
12574E90x0001: 10M-Full-FC_ON (FC: Flow Control)
12584EA0x0002: 10M-Full-FC_OFF
12594EB0x0003: 10M-Half-FC_ON
12604EC0x0004: 10M-Half-FC_OFF
12614ED0x0005: 100M-Full-FC_ON
12624EE0x0006: 100M-Full-FC_OFF
12634EF0x0007: 100M-Half-FC_ON
12644F00x0008: 100M-Half-FC_OFF
12654F10x0009: 1000M-Full-FC_ON
12664F20x000A: 1000M-Full-FC_OFF
12674F30x000B: 1000M-Half-FC_ON
12684F40x000C: 1000M-Half-FC_OFF
0xFFFF: No port
32ASCIIPort 1 to 12 Medium
15135E9Port Description = “100TX, RJ45.” Or “1000TX, SFP.”
1545609Word 0 Hi byte = ‘1’
1577629Word 0 Lo byte = ‘0’
1609649Word 1 Hi byte = ‘0’
1641669Word 1 Lo byte = ‘T’
1673689...
17056A9Word 4 Hi byte = ‘4’
17376C9Word 4 Lo byte = ‘5’
17696E9Word 5 Hi byte = ‘.’
1801709Word 5 Lo byte = ‘\0’
1833729
1865749
2HEXPort 1 to 12 Tx Packets
20257E9Ex: port 1 Tx Packet Amount = 0x87654321
20277EBWord 0 = 8765
20297EDWord 1 = 4321
20317EF
20337F1
20357F3
20377F5
20397F7
20417F9
20437FB
20457FD
20477FF

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
2HEXPort 1 to 12 Rx Packets
2089829Ex: port 1 Rx Packet Amount = 0x123456
209182BWord 0 = 0012
209382DWord 1 = 3456
209582F
2097831
2099833
2101835
2103837
2105839
210783B
210983D
211183F
2HEXPort 1 to 12 Tx Error Packets
2153869Ex: port 1 Tx Error Packet Amount = 0x87654321
215586BWord 0 = 8765
215786DWord 1 = 4321
215986F
2161871
2163873
2165875
2167877
2169879
217187B
217387D
217587F
2HEXPort 1 to 12 Rx Error Packets
22178A9Ex: port 1 Rx Error Packet Amount = 0x123456
22198ABWord 0 = 0012
22218ADWord 1 = 3456
22238AF
22258B1
22278B3
22298B5
22318B7
22338B9
22358BB
22378BD
22398BF
Redundancy & Ring Information
22818E91HEXSpanning Tree Status
0x0000: none
0x0001: STP
0x0002: RSTP
0x0003 : MSTP
22828EA1HEXXpress Ring Status
0x0000: Disabled

Table 172: MODBUS Registers

Register AddressDate Length/WordFormatDescription
DecHex
System Information
0x0001: Enabled
22838EB1HEXJet Ring Status
0x0000: Disabled
0x0001: Enabled
22848EC1HEXDual Ring Status
0x0000: Disabled
0x0001: Enabled
22858ED1HEXERPS Status
0x0000: Disabled
0x0001: Enabled
22978F91HEXXpress Ring Status Ring 1
0x0000: Disabled
0x0001: Enabled
22988FA1HEXXpress Ring Status Ring 2
0x0000: Disabled
0x0001: Enabled
22998FB3HEXXpress Ring MAC Ring 1
Ex:
Word 0 Hi byte = 0 x 00
Word 0 Lo byte = 0 x 01
Word 1 Hi byte = 0 x 02
Word 1 Lo byte = 0 x 03
Word 2 Hi byte = 0 x 04
Word 2 Lo byte = 0 x 05
23028FE3HEXXpress Ring MAC Ring 2
Ex:
Word 0 Hi byte = 0 x 00
Word 0 Lo byte = 0 x 01
Word 1 Hi byte = 0 x 02
Word 1 Lo byte = 0 x 03
Word 2 Hi byte = 1 x 04
Word 2 Lo byte = 0 x 05
23059011HEXPrimary Port of Xpress_Ring 1
Ex:
Port 5 = 0x0005
23069021HEXSecondary Port of Xpress_Ring 1
Ex:
Port 6 = 0x0006
23079031HEXPrimary Port of Xpress_Ring 2
Ex:
Port 5 = 0x0005
23089041HEXSecondary Port of Xpress_Ring 2
Ex:
Port 6 = 0x0006
23099051HEXXpress Ring Role Ring 1
0x0000: Forwarder
0x0001: Arbiter

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
23109061HEXXpress Ring Role Ring 2
0x0000: Forwarder
0x0001: Arbiter
23119071HEXXpress Ring Current Status for Ring 1
Primary Port
0x0000 : No connection
0x0001 : Forwarding
0x0002 : Blocking
23129081HEXXpress Ring Current Status for Ring 1
Secondary Port
0x0000 : No connection
0x0001 : Forwarding
0x0002 : Blocking
23139091HEXXpress Ring Current Status for Ring 2
Primary Port
0x0000 : No connection
0x0001 : Forwarding
0x0002 : Blocking
231490 A1HEXXpress Ring Current Status for Ring 2
Secondary Port
0x0000 : No connection
0x0001 : Forwarding
0x0002 : Blocking
Jet Ring Information
25379E91HEXJet Ring State
0x0000: Disabled.
0x0001: Enabled.
25389EA3HEXMaster Bridge MAC:
Ex: MAC=00:01:02:03:04:05
Word 0, high byte=0x00.
Word 0, low byte=0x01.
Word 1, high byte=0x02.
Word 1, low byte=0x03.
Word 2, high byte=0x04.
Word 2, low byte=0x05.
25419ED1HEXJet Ring Total Nodes:
Ex: When total nodes is 255(0xff).
Word 0, high byte=0x00.
Word 0, low byte=0xff.
25429EE1HEXBridge Role:
0x0000: Learning.
0x0001: Master.
0x0002: Arbiter.
0x0003: Forwarder.
0x0004: Pre-Forwarder.

Table 172: MODBUS Registers

Register AddressDate Length/WordFormatDescription
DecHex
System Information
1HEXPort Role (Port 1 to Port 12)
25539F90x0000: Disabled.
25549FA0x0001: Listening.
25559FB0x0002: Learning.
25569FC0x0003: Forwarding.
25579FD0x0004: Blocking.
25589FE0x0005: No connection.
25599FF
2560A00
2561A01
2562A02
2563A03
2564A04
1HEXRing Role (Port 1 to Port 12)
2585A190x0000: No
2586A1A0x0001: Yes
2587A1B
2588A1C
2589A1D
2590A1E
2591A1F
2592A20
2593A21
2594A22
2595A23
2596A24
Dual Ring Information
2793AE91HEXDual Ring State:
0x0000: Disabled.
0x0001: Enabled.
2794AEA3HEXXpress Ring MAC for Dual Ring:
Ex: MAC=00:01:02:03:04:05
Word 0, high byte=0x00.
Word 0, low byte=0x01.
Word 1, high byte=0x02.
Word 1, low byte=0x03.
Word 2, high byte=0x04.
Word 2, low byte=0x05.
2797AED1HEXXpress Ring Role for Dual Ring:
0x0000: Forwarder
0x0001: Arbiter

Table 172: MODBUS Registers

Register AddressDate Length/WordFormatDescription
DecHex
System Information
2798AEE1HEXXpress Ring Current Status for Dual Ring
Port 1 – (Primary Port)
High byte – Port No.
0x01– 0x0a: Port 1–Port 12
Low byte – Port Status
0x00 : No connection
0x01 : Forwarding
0x02 : Blocking
Ex: 0x0501– Port 5 Forwarding
0x0b02 – Port 12 Blocking
2799AEF1HEXXpress Ring Current Status for Dual Ring
Port 2 – (Secondary Port)
High byte – Port No.
0x01– 0x0a: Port 1–Port 12
Low byte – Port Status
0x00 : No connection
0x01 : Forwarding
0x02 : Blocking
Ex: 0x0501– Port 5 Forwarding
0x0b02 – Port 12 Blocking
2800AF03HEXSubring Master Bridge MAC :
Ex: MAC=00:01:02:03:04:05
Word 0, high byte=0x00.
Word 0, low byte=0x01.
Word 1, high byte=0x02.
Word 1, low byte=0x03.
Word 2, high byte=0x04.
Word 2, low byte=0x05.
2803AF31HEXJet Ring Total Nodes for Subring.
Ex: When total nodes is 255(0xff).
Word 0, high byte=0x00.
Word 0, low byte=0xff.
2804AF41HEXBridge Role for Subring:
0x0000: Learning.
0x0001: Master.
0x0002: Arbiter.
0x0003: Forwarder.
0x0004: Pre-Forwarder.
2805AF51HEXSubring Current Status for Dual Ring
Subport 1 – (Primary Port)
High byte – Port No.
0x01– 0x0a: Port 1–Port 12
Low byte – Port Status
0x00 : No connection
0x01 : Forwarding
0x02 : BlockingEx: 0x0501– Port 5 Forwarding

Table 172: MODBUS Registers

Register AddressDate Length/WordFormatDescription
DecHex
System Information
0x0b02 - Port 12 Blocking
2806AF61HEXSubport 2 - (Secondary Port)
High byte - Port No.
0x01- 0x0a: Port 1-Port 12
Low byte - Port Status
0x00 : No connection
0x01 : Forwarding
0x02 : Blocking
Ex: 0x0501- Port 5 Forwarding
0x0b02 - Port 12 Blocking
ERPS Information (Active Ring Only)
3049BE91HEXRing ID for ERPSn (n=1)
Ex: 0x001 Ring ID=1
3050BEA1HEXState for Ring of ERPS
0x0000: Disabled.
0x0001: Enabled.
3051BEB33ASCIIName of Ring
Ring Name = "Ring1"
Word 1 Lo byte = 'R'
Word 2 Lo byte = 'i'
Word 3 Lo byte = 'n'
Word 4 Lo byte = 'g'
Word 5 Lo byte = '1'
Word 6 Lo byte = '\0'
3084C0C1HEXVersion & Ring Type
High byte - Version.
Low byte - Ring Type.
0x01:Major-ring
0x02:Subring
Ex: 0x0201- Version2, Type:Major-ring
3085C0D1HEXInstance of Ring
Ex: 0x0001 Instance ID=1
3086C0E1HEXControl VLAN of Ring
E:0x000b Control VLAN=11

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
3087C0F1HEXRight Port of Ring
High byte - Port No.
Low byte - Port Type.
0x01:Normal
0x02:RPL Owner
0x03:RPL Neighbor
Ex: 0x0502- Port 5, RPL Owner
3088C101HEXLeft Port of Ring
High byte - Port No.
Low byte - Port Type.
0x01:Normal
0x02:RPL Owner
0x03:RPL Neighbor
Ex: 0x0303- Port 3, RPL Neighbor
3089C111HEXRing Port State
High byte - Left port state.
Low byte - Right port state.
0x00: No connection
0x01: Forwarding
0x02: Blocking
Ex: 0x0001 - Left Port No connection
Right Port Forwarding
3090C121HEXRing ID for ERPSn (n=2)
3091C131State of ERPS Ring
3092C1433ASCIIName of Ring
3125C351HEXVersion & Ring Type
3126C361Instance of Ring
3127C371Control VLAN of Ring
3128C381Right Port of Ring
3129C391Left Port of Ring
3130C3A1Ring Port State
3131C3B1HEXRing ID for ERPSn (n=3)
3132C3C1State of ERPS Ring
3133C3D33ASCIIName of Ring
3166C5E1HEXVersion & Ring Type
3167C5F1Instance of Ring
3168C601Control VLAN of Ring
3169C611Right Port of Ring
3170C621Left Port of Ring
3171C631Ring Port State

Table 172: MODBUS Registers

Register AddressDate Length/WordFormatDescription
DecHex
System Information
3172C641HEXRing ID for ERPSn (n=4)
3173C651State of ERPS Ring
3174C6633ASCIIName of Ring
3207C871HEXVersion & Ring Type
3208C881Instance of Ring
3209C891Control VLAN of Ring
3210C8A1Right Port of Ring
3211C8B1Left Port of Ring
3212C8C1Ring Port State
3213C8D1HEXRing ID for ERPSn (n=5)
3214C8E1State of ERPS Ring
3215C8F33Name of Ring
3248CB01Version & Ring Type
3249CB11Instance of Ring
3250CB21Control VLAN of Ring
3251CB31Right Port of Ring
3252CB41Left Port of Ring
3253CB51Ring Port State
3254CB61HEXRing ID for ERPSn (n=6)
3255CB71State of ERPS Ring
3256CB833ASCIIName of Ring
3289CD91HEXVersion & Ring Type
3290CDA1Instance of Ring
3291CDB1Control VLAN of Ring
3292CDC1Right Port of Ring
3293CDD1Left Port of Ring
3294CDE1Ring Port State
MSTP Information
3305CE91HEXInstance ID (Fixed 0x00, 0)
High byte – Instance ID.
Low byte – Used State.
0x01: used
0x00: non used
3306CEA3HEXRoot Bridge MAC
Ex: MAC=00:01:02:03:04:05
Word 0, high byte=0x00.
Word 0, low byte=0x01.
Word 1, high byte=0x02.
Word 1, low byte=0x03.
Word 2, high byte=0x04.
Word 2, low byte=0x05.

Table 172: MODBUS Registers

Register AddressDate Length/WordFormatDescription
DecHex
System Information
3309CED1HEXPort 1 Status
High byte – Port No.
Low byte – Port Status.
b'0:1 Type
00: Bound(STP)
01: Bound(RSTP)
10: Bound(MSTP)
11: Internal(MSTP)
b'2 P2P
0: non P2P
1: P2P
b'3:4 State
00: Blocking
01: Learning
10: Forwarding
b'5:7 Role
000: Master
001:Alternate
010: Root
011: Designated
100: Backup
101: Disabled
110: Boundary
111: Unknown
3310CEEPort 2 status
3311CEFPort 3 status
3312CF0Port 4 status
3313CF1Port 5 status
3314CF2Port 6 status
3315CF3Port 7 status
3316CF4Port 8 status
3317CF5Port 9 status
3318CF6Port 10 status
3319CF7Port 11 status
3320CF8Port 12 status

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
3337D091HEXInstance ID (Fixed 0x00, 1)
3338D0A3Root Bridge MAC
3341D0D1Port 1 status
3342D0E1Port 2 status
3343D0F1Port 3 status
3344D101Port 4 status
3345D111Port 5 status
3346D121Port 6 status
3347D131Port 7 status
3348D141Port 8 status
3349D151Port 9 status
3350D161Port 10 status
3351D171Port 11 status
3352D181Port 12 status
3369D291HEXInstance ID (Fixed 0x00, 2)
3370D2A3Root Bridge MAC
3373D2D1Port 1 status
3374D2E1Port 2 status
3375D2F1Port 3 status
3376D301Port 4 status
3377D311Port 5 status
3378D321Port 6 status
3379D331Port 7 status
3380D341Port 8 status
3381D351Port 9 status
3382D361Port 10 status
3383D371Port 11 status
3384D381Port 12 status
3401D491HEXInstance ID (Fixed 0x00, 3)
3402D4A3Root Bridge MAC
3405D4D1Port 1 status
3406D4E1Port 2 status
3407D4F1Port 3 status
3408D501Port 4 status
3409D511Port 5 status
3410D521Port 6 status
3411D531Port 7 status
3412D541Port 8 status
3413D551Port 9 status
3414D561Port 10 status
3415D571Port 11 status
3416D581Port 12 status

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
3433D691HEXInstance ID (Fixed 0x00, 4)
3434D6A3Root Bridge MAC
3437D6D1Port 1 status
3438D6E1Port 2 status
3439D6F1Port 3 status
3440D701Port 4 status
3441D711Port 5 status
3442D721Port 6 status
3443D731Port 7 status
3444D741Port 8 status
3445D751Port 9 status
3446D761Port 10 status
3447D771Port 11 status
3448D781Port 12 status
3465D891HEXInstance ID (Fixed 0x00, 5)
3466D8A3Root Bridge MAC
3469D8D1Port 1 status
3470D8E1Port 2 status
3471D8F1Port 3 status
3472D901Port 4 status
3473D911Port 5 status
3474D921Port 6 status
3475D931Port 7 status
3476D941Port 8 status
3477D951Port 9 status
3478D961Port 10 status
3479D971Port 11 status
3480D981Port 12 status
3497DA91HEXInstance ID (Fixed 0x00, 6)
3498DAA3Root Bridge MAC
3501DAD1Port 1 status
3502DAE1Port 2 status
3503DAF1Port 3 status
3504DB01Port 4 status
3505DB11Port 5 status
3506DB21Port 6 status
3507DB31Port 7 status
3508DB41Port 8 status
3509DB51Port 9 status
3510DB61Port 10 status
3511DB71Port 11 status
3512DB81Port 12 status

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
3529DC91HEXInstance ID (Fixed 0x00, 7)
3530DCA3Root Bridge MAC
3533DCD1Port 1 status
3534DCE1Port 2 status
3535DCF1Port 3 status
3536DD01Port 4 status
3537DD11Port 5 status
3538DD21Port 6 status
3539DD31Port 7 status
3540DD41Port 8 status
3541DD51Port 9 status
3542DD61Port 10 status
3543DD71Port 11 status
3544DD81Port 12 status
3561DE91HEXInstance ID (Fixed 0x00, 8)
3562DEA3Root Bridge MAC
3565DED1Port 1 status
3566DEE1Port 2 status
3567DEF1Port 3 status
3568DF01Port 4 status
3569DF11Port 5 status
3570DF21Port 6 status
3571DF31Port 7 status
3572DF41Port 8 status
3573DF51Port 9 status
3574DF61Port 10 status
3575DF71Port 11 status
3576DF81Port 12 status
3593E091HEXInstance ID (Fixed 0x00, 9)
3594E0A3Root Bridge MAC
3597E0D1Port 1 status
3598E0E1Port 2 status
3599E0F1Port 3 status
3600E101Port 4 status
3601E111Port 5 status
3602E121Port 6 status
3603E131Port 7 status
3604E141Port 8 status
3605E151Port 9 status
3606E161Port 10 status
3607E171Port 11 status
3608E181Port 12 status

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
3625E291HEXInstance ID (Fixed 0x00, 10)
3626E2A3Root Bridge MAC
3629E2D1Port 1 status
3630E2E1Port 2 status
3631E2F1Port 3 status
3632E301Port 4 status
3633E311Port 5 status
3634E321Port 6 status
3635E331Port 7 status
3636E341Port 8 status
3637E351Port 9 status
3638E361Port 10 status
3639E371Port 11 status
3640E381Port 12 status
3657E491HEXInstance ID (Fixed 0x00, 11)
3658E4A3Root Bridge MAC
3661E4D1Port 1 status
3662E4E1Port 2 status
3663E4F1Port 3 status
3664E501Port 4 status
3665E511Port 5 status
3666E521Port 6 status
3667E531Port 7 status
3668E541Port 8 status
3669E551Port 9 status
3670E561Port 10 status
3671E571Port 11 status
3672E581Port 12 status
3689E691HEXInstance ID (Fixed 0x00, 12)
3690E6A3Root Bridge MAC
3693E6D1Port 1 status
3694E6E1Port 2 status
3695E6F1Port 3 status
3696E701Port 4 status
3697E711Port 5 status
3698E721Port 6 status
3699E731Port 7 status
3700E741Port 8 status
3701E751Port 9 status
3702E761Port 10 status
3703E771Port 11 status
3704E781Port 12 status

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
3721E891HEXInstance ID (Fixed 0x00, 13)
3722E8A3Root Bridge MAC
3725E8D1Port 1 status
3726E8E1Port 2 status
3727E8F1Port 3 status
3728E901Port 4 status
3729E911Port 5 status
3730E921Port 6 status
3731E931Port 7 status
3732E941Port 8 status
3733E951Port 9 status
3734E961Port 10 status
3735E971Port 11 status
3736E981Port 12 status
3753EA91HEXInstance ID (Fixed 0x00, 14)
3754EAA3Root Bridge MAC
3757EAD1Port 1 status
3758EAE1Port 2 status
3759EAF1Port 3 status
3760EB01Port 4 status
3761EB11Port 5 status
3762EB21Port 6 status
3763EB31Port 7 status
3764EB41Port 8 status
3765EB51Port 9 status
3766EB61Port 10 status
3767EB71Port 11 status
3768EB81Port 12 status
3785EC91HEXInstance ID (Fixed 0x00, 15)
3786ECA3Root Bridge MAC
3789ECD1Port 1 status
3790ECE1Port 2 status
3791ECF1Port 3 status
3792ED01Port 4 status
3793ED11Port 5 status
3794ED21Port 6 status
3795ED31Port 7 status
3796ED41Port 8 status
3797ED51Port 9 status
3798ED61Port 10 status
3799ED71Port 11 status
3800ED81Port 12 status

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
3817EE91HEXInstance ID (Fixed 0x00, 16)
3818EEA3Root Bridge MAC
3821EED1Port 1 status
3822EEE1Port 2 status
3823EEF1Port 3 status
3824EF01Port 4 status
3825EF11Port 5 status
3826EF21Port 6 status
3827EF31Port 7 status
3828EF41Port 8 status
3829EF51Port 9 status
3830EF61Port 10 status
3831EF71Port 11 status
3832EF81Port 12 status
3849F091HEXInstance ID (Fixed 0x00, 17)
3850F0A3Root Bridge MAC
3853F0D1Port 1 status
3854F0E1Port 2 status
3855F0F1Port 3 status
3856F101Port 4 status
3857F111Port 5 status
3858F121Port 6 status
3859F131Port 7 status
3860F141Port 8 status
3861F151Port 9 status
3862F161Port 10 status
3863F171Port 11 status
3864F181Port 12 status
3881F291HEXInstance ID (Fixed 0x00, 18)
3882F2A3Root Bridge MAC
3885F2D1Port 1 status
3886F2E1Port 2 status
3887F2F1Port 3 status
3888F301Port 4 status
3889F311Port 5 status
3890F321Port 6 status
3891F331Port 7 status
3892F341Port 8 status
3893F351Port 9 status
3894F361Port 10 status
3895F371Port 11 status
3896F381Port 12 status

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
3913F491HEXInstance ID (Fixed 0x00, 19)
3914F4A3Root Bridge MAC
3917F4D1Port 1 status
3918F4E1Port 2 status
3919F4F1Port 3 status
3920F501Port 4 status
3921F511Port 5 status
3922F521Port 6 status
3923F531Port 7 status
3924F541Port 8 status
3925F551Port 9 status
3926F561Port 10 status
3927F571Port 11 status
3928F581Port 12 status
3945F691HEXInstance ID (Fixed 0x00, 20)
3946F6A3Root Bridge MAC
3949F6D1Port 1 status
3950F6E1Port 2 status
3951F6F1Port 3 status
3952F701Port 4 status
3953F711Port 5 status
3954F721Port 6 status
3955F731Port 7 status
3956F741Port 8 status
3957F751Port 9 status
3958F761Port 10 status
3959F771Port 11 status
3960F781Port 12 status
3977F891HEXInstance ID (Fixed 0x00, 21)
3978F8A3Root Bridge MAC
3981F8D1Port 1 status
3982F8E1Port 2 status
3983F8F1Port 3 status
3984F901Port 4 status
3985F911Port 5 status
3986F921Port 6 status
3987F931Port 7 status
3988F941Port 8 status
3989F951Port 9 status
3990F961Port 10 status
3991F971Port 11 status
3992F981Port 12 status

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
4009FA91HEXInstance ID (Fixed 0x00, 22)
4010FAA3Root Bridge MAC
4013FAD1Port 1 status
4014FAE1Port 2 status
4015FAF1Port 3 status
4016FB01Port 4 status
4017FB11Port 5 status
4018FB21Port 6 status
4019FB31Port 7 status
4020FB41Port 8 status
4021FB51Port 9 status
4022FB61Port 10 status
4023FB71Port 11 status
4024FB81Port 12 status
4041FC91HEXInstance ID (Fixed 0x00, 23)
4042FCA3Root Bridge MAC
4045FCD1Port 1 status
4046FCE1Port 2 status
4047FCF1Port 3 status
4048FD01Port 4 status
4049FD11Port 5 status
4050FD21Port 6 status
4051FD31Port 7 status
4052FD41Port 8 status
4053FD51Port 9 status
4054FD61Port 10 status
4055FD71Port 11 status
4056FD81Port 12 status
4073FE91HEXInstance ID (Fixed 0x00, 24)
4074FEA3Root Bridge MAC
4077FED1Port 1 status
4078FEE1Port 2 status
4079FEF1Port 3 status
4080FF01Port 4 status
4081FF11Port 5 status
4082FF21Port 6 status
4083FF31Port 7 status
4084FF41Port 8 status
4085FF51Port 9 status
4086FF61Port 10 status
4087FF71Port 11 status
4088FF81Port 12 status

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
410510091HEXInstance ID (Fixed 0x00, 25)
4106100 A3Root Bridge MAC
4109100D1Port 1 status
4110100 Est.1Port 2 status
4111100F1Port 3 status
411210101Port 4 status
411310111Port 5 status
411410121Port 6 status
411510131Port 7 status
411610141Port 8 status
411710151Port 9 status
411810161Port 10 status
411910171Port 11 status
412010181Port 12 status
413710291HEXInstance ID (Fixed 0x00, 26)
4138102 A3Root Bridge MAC
4141102D1Port 1 status
4142102 Est.1Port 2 status
4143102F1Port 3 status
414410301Port 4 status
414510311Port 5 status
414610321Port 6 status
414710331Port 7 status
414810341Port 8 status
414910351Port 9 status
415010361Port 10 status
415110371Port 11 status
415210381Port 12 status
416910491HEXInstance ID (Fixed 0x00, 27)
4170104 A3Root Bridge MAC
4173104D1Port 1 status
4174104 Est.1Port 2 status
4175104F1Port 3 status
417610501Port 4 status
417710511Port 5 status
417810521Port 6 status
417910531Port 7 status
418010541Port 8 status
418110551Port 9 status
418210561Port 10 status
418310571Port 11 status
418410581Port 12 status

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
420110691HEXInstance ID (Fixed 0x00, 28)
4202106 A3Root Bridge MAC
4205106D1Port 1 status
4206106 Est.1Port 2 status
4207106F1Port 3 status
420810701Port 4 status
420910711Port 5 status
421010721Port 6 status
421110731Port 7 status
421210741Port 8 status
421310751Port 9 status
421410761Port 10 status
421510771Port 11 status
421610781Port 12 status
423310891HEXInstance ID (Fixed 0x00, 29)
4234108 A3Root Bridge MAC
4237108D1Port 1 status
4238108 Est.1Port 2 status
4239108F1Port 3 status
424010901Port 4 status
424110911Port 5 status
424210921Port 6 status
424310931Port 7 status
424410941Port 8 status
424510951Port 9 status
424610961Port 10 status
424710971Port 11 status
424810981Port 12 status
426510A91HEXInstance ID (Fixed 0x00, 30)
426610AA3Root Bridge MAC
426910AD1Port 1 status
427010AE1Port 2 status
427110AF1Port 3 status
427210B01Port 4 status
427310B11Port 5 status
427410B21Port 6 status
427510B31Port 7 status
427610B41Port 8 status
427710B51Port 9 status
427810B61Port 10 status
427910B71Port 11 status
428010B81Port 12 status

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
429710C91HEXInstance ID (Fixed 0x00, 31)
429810CA3Root Bridge MAC
430110CD1Port 1 status
430210CE1Port 2 status
430310CF1Port 3 status
430410D01Port 4 status
430510D11Port 5 status
430610D21Port 6 status
430710D31Port 7 status
430810D41Port 8 status
430910D51Port 9 status
431010D61Port 10 status
431110D71Port 11 status
431210D81Port 12 status
432910E91HEXInstance ID (Fixed 0x00, 32)
433010EA3Root Bridge MAC
433310ED1Port 1 status
433410EE1Port 2 status
433510EF1Port 3 status
433610F01Port 4 status
433710F11Port 5 status
433810F21Port 6 status
433910F31Port 7 status
434010F41Port 8 status
434110F51Port 9 status
434210F61Port 10 status
434310F71Port 11 status
434410F81Port 12 status
436111091HEXInstance ID (Fixed 0x00, 33)
4362110 A3Root Bridge MAC
4365110D1Port 1 status
4366110 Est.1Port 2 status
4367110F1Port 3 status
436811101Port 4 status
436911111Port 5 status
437011121Port 6 status
437111131Port 7 status
437211141Port 8 status
437311151Port 9 status
437411161Port 10 status
437511171Port 11 status
437611181Port 12 status

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
439311291HEXInstance ID (Fixed 0x00, 34)
4394112 A3Root Bridge MAC
4397112D1Port 1 status
4398112 Est.1Port 2 status
4399112F1Port 3 status
440011301Port 4 status
440111311Port 5 status
440211321Port 6 status
440311331Port 7 status
440411341Port 8 status
440511351Port 9 status
440611361Port 10 status
440711371Port 11 status
440811381Port 12 status
442511491HEXInstance ID (Fixed 0x00, 35)
4426114 A3Root Bridge MAC
4429114D1Port 1 status
4430114 Est.1Port 2 status
4431114F1Port 3 status
443211501Port 4 status
443311511Port 5 status
443411521Port 6 status
443511531Port 7 status
443611541Port 8 status
443711551Port 9 status
443811561Port 10 status
443911571Port 11 status
444011581Port 12 status
445711691HEXInstance ID (Fixed 0x00, 36)
4458116 A3Root Bridge MAC
4461116D1Port 1 status
4462116 Est.1Port 2 status
4463116F1Port 3 status
446411701Port 4 status
446511711Port 5 status
446611721Port 6 status
446711731Port 7 status
446811741Port 8 status
446911751Port 9 status
447011761Port 10 status
447111771Port 11 status
447211781Port 12 status

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
448911891HEXInstance ID (Fixed 0x00, 37)
4490118 A3Root Bridge MAC
4493118D1Port 1 status
4494118 Est.1Port 2 status
4495118F1Port 3 status
449611901Port 4 status
449711911Port 5 status
449811921Port 6 status
449911931Port 7 status
450011941Port 8 status
450111951Port 9 status
450211961Port 10 status
450311971Port 11 status
450411981Port 12 status
452111A91HEXInstance ID (Fixed 0x00, 38)
452211AA3Root Bridge MAC
452511AD1Port 1 status
452611AE1Port 2 status
452711AF1Port 3 status
452811B01Port 4 status
452911B11Port 5 status
453011B21Port 6 status
453111B31Port 7 status
453211B41Port 8 status
453311B51Port 9 status
453411B61Port 10 status
453511B71Port 11 status
453611B81Port 12 status
455311C91HEXInstance ID (Fixed 0x00, 39)
455411CA3Root Bridge MAC
455711CD1Port 1 status
455811CE1Port 2 status
455911CF1Port 3 status
456011D01Port 4 status
456111D11Port 5 status
456211D21Port 6 status
456311D31Port 7 status
456411D41Port 8 status
456511D51Port 9 status
456611D61Port 10 status
456711D71Port 11 status
456811D81Port 12 status

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
458511E91HEXInstance ID (Fixed 0x00, 40)
458611EA3Root Bridge MAC
458911ED1Port 1 status
459011EE1Port 2 status
459111EF1Port 3 status
459211F01Port 4 status
459311F11Port 5 status
459411F21Port 6 status
459511F31Port 7 status
459611F41Port 8 status
459711F51Port 9 status
459811F61Port 10 status
459911F71Port 11 status
460011F81Port 12 status
461712091HEXInstance ID (Fixed 0x00, 41)
4618120 A3Root Bridge MAC
4621120D1Port 1 status
4622120 Est.1Port 2 status
4623120F1Port 3 status
462412101Port 4 status
462512111Port 5 status
462612121Port 6 status
462712131Port 7 status
462812141Port 8 status
462912151Port 9 status
463012161Port 10 status
463112171Port 11 status
463212181Port 12 status
464912291HEXInstance ID (Fixed 0x00, 42)
4650122 A3Root Bridge MAC
4653122D1Port 1 status
4654122 Est.1Port 2 status
4655122F1Port 3 status
465612301Port 4 status
465712311Port 5 status
465812321Port 6 status
465912331Port 7 status
466012341Port 8 status
466112351Port 9 status
466212361Port 10 status
466312371Port 11 status
466412381Port 12 status

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
468112491HEXInstance ID (Fixed 0x00, 43)
4682124 A3Root Bridge MAC
4685124D1Port 1 status
4686124 Est.1Port 2 status
4687124F1Port 3 status
468812501Port 4 status
468912511Port 5 status
469012521Port 6 status
469112531Port 7 status
469212541Port 8 status
469312551Port 9 status
469412561Port 10 status
469512571Port 11 status
469612581Port 12 status
471312691HEXInstance ID (Fixed 0x00, 44)
4714126 A3Root Bridge MAC
4717126D1Port 1 status
4718126 Est.1Port 2 status
4719126F1Port 3 status
472012701Port 4 status
472112711Port 5 status
472212721Port 6 status
472312731Port 7 status
472412741Port 8 status
472512751Port 9 status
472612761Port 10 status
472712771Port 11 status
472812781Port 12 status
474512891HEXInstance ID (Fixed 0x00, 45)
4746128 A3Root Bridge MAC
4749128D1Port 1 status
4750128 Est.1Port 2 status
4751128F1Port 3 status
475212901Port 4 status
475312911Port 5 status
475412921Port 6 status
475512931Port 7 status
475612941Port 8 status
475712951Port 9 status
475812961Port 10 status
475912971Port 11 status
476012981Port 12 status

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
477712A91HEXInstance ID (Fixed 0x00, 46)
477812AA3Root Bridge MAC
478112AD1Port 1 status
478212AE1Port 2 status
478312AF1Port 3 status
478412B01Port 4 status
478512B11Port 5 status
478612B21Port 6 status
478712B31Port 7 status
478812B41Port 8 status
478912B51Port 9 status
479012B61Port 10 status
479112B71Port 11 status
479212B81Port 12 status
480912C91HEXInstance ID (Fixed 0x00, 47)
481012CA3Root Bridge MAC
481312CD1Port 1 status
481412CE1Port 2 status
481512CF1Port 3 status
481612D01Port 4 status
481712D11Port 5 status
481812D21Port 6 status
481912D31Port 7 status
482012D41Port 8 status
482112D51Port 9 status
482212D61Port 10 status
482312D71Port 11 status
482412D81Port 12 status
484112E91HEXInstance ID (Fixed 0x00, 48)
484212EA3Root Bridge MAC
484512ED1Port 1 status
484612EE1Port 2 status
484712EF1Port 3 status
484812F01Port 4 status
484912F11Port 5 status
485012F21Port 6 status
485112F31Port 7 status
485212F41Port 8 status
485312F51Port 9 status
485412F61Port 10 status
485512F71Port 11 status
485612F81Port 12 status

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
487313091HEXInstance ID (Fixed 0x00, 49)
4874130 A3Root Bridge MAC
4877130D1Port 1 status
4878130 Est.1Port 2 status
4879130F1Port 3 status
488013101Port 4 status
488113111Port 5 status
488213121Port 6 status
488313131Port 7 status
488413141Port 8 status
488513151Port 9 status
488613161Port 10 status
488713171Port 11 status
488813181Port 12 status
490513291HEXInstance ID (Fixed 0x00, 50)
4906132 A3Root Bridge MAC
4909132D1Port 1 status
4910132 Est.1Port 2 status
4911132F1Port 3 status
491213301Port 4 status
491313311Port 5 status
491413321Port 6 status
491513331Port 7 status
491613341Port 8 status
491713351Port 9 status
491813361Port 10 status
491913371Port 11 status
492013381Port 12 status
493713491HEXInstance ID (Fixed 0x00, 51)
4938134 A3Root Bridge MAC
4941134D1Port 1 status
4942134 Est.1Port 2 status
4943134F1Port 3 status
494413501Port 4 status
494513511Port 5 status
494613521Port 6 status
494713531Port 7 status
494813541Port 8 status
494913551Port 9 status
495013561Port 10 status
495113571Port 11 status
495213581Port 12 status

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
496913691HEXInstance ID (Fixed 0x00, 52)
4970136 A3Root Bridge MAC
4973136D1Port 1 status
4974136 Est.1Port 2 status
4975136F1Port 3 status
497613701Port 4 status
497713711Port 5 status
497813721Port 6 status
497913731Port 7 status
498013741Port 8 status
498113751Port 9 status
498213761Port 10 status
498313771Port 11 status
498413781Port 12 status
500113891HEXInstance ID (Fixed 0x00, 53)
5002138 A3Root Bridge MAC
5005138D1Port 1 status
5006138 Est.1Port 2 status
5007138F1Port 3 status
500813901Port 4 status
500913911Port 5 status
501013921Port 6 status
501113931Port 7 status
501213941Port 8 status
501313951Port 9 status
501413961Port 10 status
501513971Port 11 status
501613981Port 12 status
503313A91HEXInstance ID (Fixed 0x00, 54)
503413AA3Root Bridge MAC
503713AD1Port 1 status
503813AE1Port 2 status
503913AF1Port 3 status
504013B01Port 4 status
504113B11Port 5 status
504213B21Port 6 status
504313B31Port 7 status
504413B41Port 8 status
504513B51Port 9 status
504613B61Port 10 status
504713B71Port 11 status
504813B81Port 12 status

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
506513C91HEXInstance ID (Fixed 0x00, 55)
506613CA3Root Bridge MAC
506913CD1Port 1 status
507013CE1Port 2 status
507113CF1Port 3 status
507213D01Port 4 status
507313D11Port 5 status
507413D21Port 6 status
507513D31Port 7 status
507613D41Port 8 status
507713D51Port 9 status
507813D61Port 10 status
507913D71Port 11 status
508013D81Port 12 status
509713E91HEXInstance ID (Fixed 0x00, 56)
509813EA3Root Bridge MAC
510113ED1Port 1 status
510213EE1Port 2 status
510313EF1Port 3 status
510413F01Port 4 status
510513F11Port 5 status
510613F21Port 6 status
510713F31Port 7 status
510813F41Port 8 status
510913F51Port 9 status
511013F61Port 10 status
511113F71Port 11 status
511213F81Port 12 status
512914091HEXInstance ID (Fixed 0x00, 57)
5130140 A3Root Bridge MAC
5133140D1Port 1 status
5134140 Est.1Port 2 status
5135140F1Port 3 status
513614101Port 4 status
513714111Port 5 status
513814121Port 6 status
513914131Port 7 status
514014141Port 8 status
514114151Port 9 status
514214161Port 10 status
514314171Port 11 status
514414181Port 12 status

Table 172: MODBUS Registers

Register AddressDate Length/ WordFormatDescription
DecHex
System Information
516114291HEXInstance ID (Fixed 0x00, 58)
5162142 A3Root Bridge MAC
5165142D1Port 1 status
5166142 Est.1Port 2 status
5167142F1Port 3 status
516814301Port 4 status
516914311Port 5 status
517014321Port 6 status
517114331Port 7 status
517214341Port 8 status
517314351Port 9 status
517414361Port 10 status
517514371Port 11 status
517614381Port 12 status
519314491HEXInstance ID (Fixed 0x00, 59)
5194144 A3Root Bridge MAC
5197144D1Port 1 status
5198144 Est.1Port 2 status
5199144F1Port 3 status
520014501Port 4 status
520114511Port 5 status
520214521Port 6 status
520314531Port 7 status
520414541Port 8 status
520514551Port 9 status
520614561Port 10 status
520714571Port 11 status
520814581Port 12 status
522514691HEXInstance ID (Fixed 0x00, 60)
5226146 A3Root Bridge MAC
5229146D1Port 1 status
5230146 Est.1Port 2 status
5231146F1Port 3 status
523214701Port 4 status
523314711Port 5 status
523414721Port 6 status
523514731Port 7 status
523614741Port 8 status
523714751Port 9 status
523814761Port 10 status
523914771Port 11 status
524014781Port 12 status

Table 172: MODBUS Registers

Register AddressDate Length/WordFormatDescription
DecHex
System Information
525714891HEXInstance ID (Fixed 0x00, 61)
5258148 A3Root Bridge MAC
5261148D1Port 1 status
5262148 Est.1Port 2 status
5263148F1Port 3 status
526414901Port 4 status
526514911Port 5 status
526614921Port 6 status
526714931Port 7 status
526814941Port 8 status
526914951Port 9 status
527014961Port 10 status
527114971Port 11 status
527214981Port 12 status
528914A91HEXInstance ID (Fixed 0x00, 62)
529014AA3Root Bridge MAC
529314AD1Port 1 status
529414AE1Port 2 status
529514AF1Port 3 status
529614B01Port 4 status
529714B11Port 5 status
529814B21Port 6 status
529914B31Port 7 status
530014B41Port 8 status
530114B51Port 9 status
530214B61Port 10 status
530314B71Port 11 status
530414B81Port 12 status
532114C91HEXInstance ID (Fixed 0x00, 63)
532214CA3Root Bridge MAC
532514CD1Port 1 status
532614CE1Port 2 status
532714CF1Port 3 status
532814D01Port 4 status
532914D11Port 5 status
533014D21Port 6 status
533114D31Port 7 status
533214D41Port 8 status
533314D51Port 9 status
533414D61Port 10 status
533514D71Port 11 status
533614D81Port 12 status

List of Figures

Figure 1: Front View of the Industrial Managed Switch....25

Figure 2: Top View of the industrial ECO switch....27

Figure 3: Power Supply (PWR/RPS)....28

Figure 4: Network Connections ......29

Figure 5: Device-LEDs ....31

Figure 6: Port-LEDs ......32

Figure 7: DIP Switches....33

Figure 8: Reset Button ....34

Figure 9: Label (Example)....35

Figure 10: MAC Address Table Flowchart....46

Figure 11: Half-Duplex Mode....48

Figure 12: Full-Duplex Mode....48

Figure 13: MOD without MVR....63

Figure 14: MOD Supports MVR....63

Figure 15: Multicast Address....66

Figure 16: Port-Based Q-in-Q....76

Figure 17: Configuration Example .....77

Figure 18: Application 1 (via a Router)....79

Figure 19: Application 2 (Local in Different VLANs)....79

Figure 20: Dual Ring Switch ABC....82

Figure 21: Dual Ring Switch AB....82

Figure 22: Dual Homing ....86

Figure 23: Jet Ring....90

Figure 24: DHCP Snooping....100

Figure 25: IEEE 802.1X....105

Figure 26: RADIUS Server....105

Figure 27: WBM "System Information" Page 121

Figure 28: WBM Page, "General Settings" – "System" Tab 123

Figure 29: WBM Page, "General" – "Jumbo Frame" Tab....125

Figure 30: WBM Page, "General" – "SNTP" Tab ....126

Figure 31: WBM Page, "General" – "Management Host" Tab ....129

Figure 32: WBM Page, "MAC Management" – "Static MAC Settings" Tab......130

Figure 33: WBM Page, "MAC Management" – "MAC Table" Tab .....132

Figure 34: WBM Page, "MAC Management" – "Age Time Setting" Tab......133

Figure 35: WBM Page, "MAC Management" – "Refusal MAC Settings" Tab ....134

Figure 36: WBM "Port Mirroring" Page 135

Figure 37: WBM Page, "Port Settings" – "General Settings" Tab....137

Figure 38: WBM Page, "Port Settings" – "Information" Tab ....139

Figure 39: WBM "QoS" Page – "Port Priority" Tab....140

Figure 40: WBM "QoS" Page – "IP DiffServ (DSCP)" Tab .....141

Figure 41: WBM "QoS" Page – "Priority/Queue Mapping" Tab ....142

Figure 42: WBM "QoS" Page – "Schedule Mode" Tab....143

Figure 43: WBM "Rate Limitation" Page – "Broadcast Storm Control" Tab .....145

Figure 44: WBM "Rate Limitation" Page – "Rate Limitation" Tab .....147

Figure 45: WBM "IGMP Snooping" Page – "General Settings" Tab ......148

Figure 46: WBM "IGMP Snooping" Page – "Port Settings" Tab ....150

Figure 47: WBM "IGMP Snooping" Page – "Querier Settings" Tab....152

Figure 48: WBM "IGMP Filter" Page – "General Settings" Tab ....153

Figure 49: WBM "IGMP Filter" Page – "Multicast Groups" Tab....154

Figure 50: WBM "IGMP Filter" Page – "Port Settings" Tab ....155

Figure 51: WBM "Multicast VLAN" Page – "MVR Settings" Tab....156

Figure 52: WBM "Multicast VLAN" Page – "Group Settings" Tab....158

Figure 53: WBM "Static Multicast Addresses" Page 159

Figure 54: WBM "Multicast IP Statistics" Page 160

Figure 55: WBM "Port Isolation" Page 161

Figure 56: WBM "VLAN" Page – "VLAN Settings" Tab 163

Figure 57: WBM "VLAN" Page – "Tag Settings" Tab ....165

Figure 58: WBM "VLAN" Page – "Port Settings" Tab....166

Figure 59: WBM "GARP VLAN Registration Protocol" Page – "GVRP" Tab .....168

Figure 60: WBM “GARP VLAN Registration Protocol” Page – “GARP Timer” Tab 170

Figure 61: WBM "IP Subnet VLAN" Page....172

Figure 62: WBM "MAC VLAN" Page....173

Figure 63: WBM "Protocol VLAN" Page....174

Figure 64: WBM "Q-in-Q" Page – "VLAN Stacking" Tab....175

Figure 65: WBM "Q-in-Q" Page – "Port-Based Q-in-Q" Tab....177

Figure 66: WBM "Q-in-Q" Page – "Selective Q-in-Q" Tab....178

Figure 67: WBM "DHCP Relay" Page....180

Figure 68: WBM "DHCP Options" Page....181

Figure 69: WBM "Dual Homing" Page 183

Figure 70: WBM "Dual Ring" Page 185

Figure 71: WBM "ERPS" Page – "Ring Settings" Tab....187

Figure 72: WBM "ERPS" Page – "Instance Settings" Tab.... 191

Figure 73: WBM "Link Aggregation" Page – "Static Trunk" Tab ....192

Figure 74: WBM "Link Aggregation" Page – "LACP" Tab....194

Figure 75: WBM "Link Aggregation" Page – "LACP Info." Tab....196

Figure 76: WBM "LLDP" Page – "LLDP Settings" Tab....198

Figure 77: WBM "LLDP" Page – "Neighboring Detection" Tab....200

Figure 78: WBM "Loop Detection" Page....201

Figure 79: WBM "Jet Ring" Page....203

Figure 80: WBM "MODBUS" Page....205

Figure 81: WBM "PoE" Page – "Configuration" Tab....206

Figure 82: WBM "PoE" Page – "Schedule" Tab....208

Figure 83: WBM "PoE" Page – "PD Alive Check" Tab....211

Figure 84: WBM "PoE" Page – "Power Delay" Tab....214

Figure 85: WBM "Spanning Tree Protocol" Page – "General Settings" Tab .....216

Figure 86: WBM "Spanning Tree Protocol" Page – "Port Parameters" Tab......218

Figure 87: WBM "Spanning Tree Protocol" Page – "STP Status" Tab .....221

Figure 88: WBM "Xpress Ring" Page ......222

Figure 89: WBM "DHCP Snooping" Page – "DHCP Snooping" Tab....224

Figure 90: WBM "DHCP Snooping" Page – "Port Settings" Tab ......226

Figure 91: WBM "DHCP Snooping" Page – "Server Screening" Tab .....227

Figure 92: WBM "DHCP Snooping Binding Table" Page – "Static Entry" Tab ...228

Figure 93: WBM “DHCP Snooping Binding Table” Page – “Binding Table” Tab 230

Figure 94: WBM "ARP Inspection" Page – "ARP Inspection" Tab....231

Figure 95: WBM "ARP Inspection" Page – "Filter Table" Tab ......233

Figure 96: WBM "Access Control List" Page ......234

Figure 97: WBM "IEEE 802.1X" Page – "Global Settings" Tab ....238

Figure 98: WBM "IEEE 802.1X" Page – "Port Settings" Tab....241

Figure 99: WBM "Port Security" Page 245

Figure 100: WBM "Alarm Information" Page....247

Figure 101: WBM "System Information" Page 248

Figure 102: WBM "Port Statistics" Page 250

Figure 103: WBM "Port Utilization" Page....251

Figure 104: WBM "RMON Statistics" Page....252

Figure 105: WBM "SFP Information" Page 255

Figure 106: WBM "Traffic Monitor" Page 258

Figure 107: WBM "SNMP" Page – "SNMP Settings" Tab ......261

Figure 108: WBM "SNMP" Page – "Community Name" Tab....262

Figure 109: WBM "SNMP Trap" Page – "Trap Receiver Settings" Tab .....264

Figure 110: WBM "SNMPv3 Configuration" Page – "SNMPv3 User" Tab .....265

Figure 111: WBM "SNMPv3 Configuration" Page – "SNMPv3 Groups" Tab .....267

Figure 112: WBM "SNMPv3 Configuration" Page – "SNMPv3 View" Tab......268

Figure 113: WBM "Auto Provision" Page....269

Figure 114: WBM "Mail Alarm" Page....270

Figure 115: WBM "Maintenance" Page – "Configuration" Tab .....272

Figure 116: WBM "Maintenance" Page – "Firmware" Tab ....274

Figure 117: WBM "Maintenance" Page – "Reboot" Tab....275

Figure 118: WBM "Maintenance" Page – "Reboot" Tab – Message....275

Figure 119: WBM "Maintenance" Page – "Protocols" Tab .....276

Figure 120: WBM "System Log" Page 278

Figure 121: WBM "User Account" Page....280

Figure 122: RJ-45 Connector Pin Assignment....282

Figure 123: Connector Pin Assignment RJ-45 to DB9....282

List of Tables

Table 1: Number Notation ...... 13

Table 2: Font Conventions....13

Table 3: Comparison of PoE and PoE+....21

Table 4: Calculation Example for PoE+....21

Table 5: Legend for the Figure "Front View of the Industrial Managed Switch"...25

Table 6: Legend for the Figure "Front View of the Industrial Managed Switch"...27

Table 7: Legend for Figure "Power Supply (PWR/RPS)"......28

Table 8: Legend for Figure "Network Connections"....29

Table 9: Legend for "Device LEDs" Figure ......31

Table 10: Legend for "Port LEDs" Figure....32

Table 11: Legend for Figure "DIP Switches....33

Table 12: Legend for Figure "Reset Button" 34

Table 13: Legend for Figure "Label" 35

Table 14: Technical Data – Device Data ......36

Table 15: Technical Data – System Data ......36

Table 16: Technical Data – Power Supply....36

Table 17: Technical Data – Communication ......37

Table 18: Technical Data – Environmental Conditions ......37

Table 19: Priority Levels....54

Table 20: Multicast Classes and Address Ranges....65

Table 21: IP Multicast Addresses....66

Table 22: Option Frame Format ....81

Table 23: Option Frame Format ....81

Table 24: Frame Format of the "Circuit ID" Sub-Option 81

Table 25: Frame Format of the "Remote ID" Sub-Option....81

Table 26: Format of the "Circuit ID" Sub-Option ....81

Table 27: STP Path Costs....93

Table 28: Default Settings for the Telnet Port....115

Table 29: Default Settings for the Console Port....116

Table 30: Login Screen ....116

Table 31: Overview – Navigation Links and WBM Pages....118

Table 32: WBM "System Information" Page ......122

Table 33: WBM Page, "General Settings" – "System" Tab ......123

Table 34: WBM Page, "General" – "Jumbo Frame" Tab ......125

Table 35: WBM Page, "General" – "SNTP" Tab....127

Table 36: WBM Page, "General" – "Management Host" Tab ....129

Table 37: WBM Page, "MAC Management" – "Static MAC Settings" Tab......130

Table 38: WBM Page, "MAC Management" – "MAC Table" Tab .....132

Table 39: WBM Page, "MAC Management" – "Age Time Setting" Tab....133

Table 40: WBM Page, "MAC Management" – "Refusal MAC Settings" Tab.....134

Table 41: WBM "Port Mirroring" Page ......136

Table 42: WBM Page, "Port Settings" – "General Settings" Tab....138

Table 43: WBM Page, "Port Settings" – "Information" Tab....139

Table 44: WBM "QoS" Page – "Port Priority" Tab....140

Table 45: WBM "QoS" Page – "IP DiffServ (DSCP)" Tab ....141

Table 46: WBM "QoS" Page – "Priority/Queue Mapping" Tab .....142

Table 47: Default Settings....142

Table 48: WBM "QoS" Page – "Schedule Mode" Tab....144

Table 49: WBM "Rate Limitation" Page – "Broadcast Storm Control" Tab .....146

Table 50: WBM "Rate Limitation" Page – "Rate Limitation" Tab .....147

Table 51: WBM "IGMP Snooping" Page – "General Settings" Tab .....149

Table 52: WBM "IGMP Snooping" Page – "Port Settings" Tab ....151

Table 53: WBM "IGMP Snooping" Page – "Querier Settings" Tab .....152

Table 54: WBM "IGMP Filter" Page – "General Settings" Tab ......153

Table 55: WBM "IGMP Filter" Page – "Multicast Groups" Tab ....154

Table 56: WBM "IGMP Filter" Page – "Port Settings" Tab .....155

Table 57: WBM "Multicast VLAN" Page – "MVR Settings" Tab....157

Table 58: WBM "Multicast VLAN" Page – "Group Settings" Tab....158

Table 59: WBM "Static Multicast Addresses" Page 159

Table 60: WBM "Multicast Statistics" Page....160

Table 61: WBM "Port Isolation" Page 162

Table 62: WBM "VLAN" Page – "VLAN Settings" Tab ....163

Table 63: WBM "VLAN" Page – "TAG Settings" Tab ....165

Table 64: WBM "VLAN" Page – "Port Settings" Tab ....167

Table 65: WBM "GARP VLAN Registration Protocol" Page – "GVRP" Tab......169

Table 66: WBM "GARP VLAN Registration Protocol" Page – "GARP Timer" Tab 171

Table 67: WBM "IP Subnet VLAN" Page....172

Table 68: WBM "MAC VLAN" Page....173

Table 69: WBM "Protocol VLAN" Page....174

Table 70: WBM "Q-in-Q" Page – "VLAN Stacking" Tab .....176

Table 71: WBM "Q-in-Q" Page – "Port-Based Q-in-Q" Tab....177

Table 72: WBM "Q-in-Q" Page – "Selective Q-in-Q" Tab 179

Table 73: WBM "DHCP Relay" Page....180

Table 74: WBM "DHCP Options" Page....182

Table 75: WBM "Dual Homing" Page ......184

Table 76: WBM "Dual Ring" Page 186

Table 77: WBM "ERPS" Page – "Ring Settings" Tab....188

Table 78: WBM "ERPS" Page – "Instance Settings" Tab....191

Table 79: WBM "Link Aggregation" Page – "Static Trunk" Tab ....193

Table 80: WBM "Link Aggregation" Page – "LACP" Tab....195

Table 81: WBM "Link Aggregation" Page – "LACP Info." Tab....197

Table 82: WBM "LLDP" Page – "LLDP Settings" Tab ....199

Table 83: WBM "LLDP" Page – "Neighboring Detection" Tab....200

Table 84: WBM "Loop Detection" Page 202

Table 85: WBM "Jet Ring" Page....204

Table 86: WBM "MODBUS" Page ......205

Table 87: WBM "PoE" Page – "Configuration" Tab....207

Table 88: WBM "PoE" Page – "Schedule" Tab .....209

Table 89: WBM "PoE" Page – "PD Alive Check" Tab ......212

Table 90: WBM "PoE" Page – "Power Delay" Tab....215

Table 91: WBM "Spanning Tree Protocol" Page – "General Settings" Tab .....217

Table 92: WBM "Spanning Tree Protocol" Page – "Port Parameters" Tab......219

Table 93: WBM "STP" Page – "STP Status" Tab....221

Table 94: WBM "Xpress Ring" Page....223

Table 95: WBM "DHCP Snooping" Page – "DHCP Snooping" Tab....225

Table 96: WBM "DHCP Snooping" Page – "Port Settings" Tab .....226

Table 97: WBM "DHCP Snooping" Page – "Server Screening" Tab .....227

Table 98: WBM "DHCP Snooping Binding Table" Page – "Static Entry" Tab ....229

Table 99: WBM "DHCP Snooping Binding Table" Page – "Binding Table" Tab 230

Table 100: WBM "ARP Inspection" Page – "ARP Inspection" Tab....232

Table 101: WBM "ARP Inspection" Page – "Filter Table" Tab......233

Table 102: WBM "Access Control List" Page....235

Table 103: WBM "IEEE 802.1X" Page – "Global Settings" Tab ......239

Table 104: WBM "IEEE 802.1X" Page – "Port Settings" Tab ......242

Table 105: WBM "Port Security" Page....246

Table 106: WBM "Alarm Information" Page....247

Table 107: WBM "System Information" Page ......249

Table 108: WBM "Port Statistics" Page 250

Table 109: WBM "Port Utilization" Page 251

Table 110: WBM "RMON Statistics" Page....253

Table 111: WBM "SFP Information" Page 256

Table 112: WBM "Traffic Monitor" Page 259

Table 113: WBM "SNMP" Page – "SNMP Settings" Tab .....261

Table 114: WBM SNMP" Page – "Community Name" Tab ......263

Table 115: WBM "SNMP Trap" Page – "Trap Receiver Settings" Tab .....264

Table 116: WBM "SNMPv3 Configuration" Page – "SNMPv3 User" Tab .....266

Table 117: WBM "SNMPv3 Configuration" Page – "SNMPv3 Groups" Tab .....267

Table 118: WBM "SNMPv3 Configuration" Page – "SNMPv3 View" Tab .....268

Table 119: WBM "Auto Provision" Page 269

Table 120: WBM "Mail Alarm" Page 271

Table 121: WBM "Maintenance" Page – "Protocols" Tab....277

Table 122: WBM "System Log" Page 279

Table 123: WBM "User Account" Page....281

Table 124: RJ-45 Cable ......283

Table 125: CLI "System Information" Configuration....284

Table 126: CLI "System" Configuration .....285

Table 127: CLI "Jumbo Frame" Configuration .....285

Table 128: CLI "SNTP" Configuration....286

Table 129: CLI "Management Host" Configuration .....287

Table 130: CLI "MAC Management" Configuration....288

Table 131: CLI "Blackhole MAC" Configuration .....288

Table 132: CLI "Port Mirroring" Configuration....289

Table 133: CLI "Port Settings" Configuration....290

Table 134: CLI "QoS" Configuration....291

Table 135: CLI "Rate Limitation" Configuration....291

Table 136: CLI "Storm Control" Configuration .....292

Table 137: CLI "IGMP Snooping" Configuration .....293

Table 138: CLI "MVR" Configuration .....294

Table 139: CLI "Multicast Address" Configuration .....294

Table 140: CLI "Port Isolation" Configuration....295

Table 141: CLI "VLAN Settings" Configuration .....296

Table 142: CLI "GARP/GVRP" Configuration .....297

Table 143: CLI "VLAN Stacking" Configuration....298

Table 144: CLI "DHCP Relay" Configuration .....299

Table 145: CLI "Dual Homing" Configuration....300

Table 146: CLI "Link Aggregation" Configuration....300

Table 147: CLI "LACP" Configuration....301
Table 148: CLI "LLDP" Configuration ....301
Table 149: CLI "Loop Detection" Configuration....302
Table 150: CLI "STP" Configuration ....302
Table 151: CLI "Xpress Ring" Configuration....304
Table 152: CLI "DHCP Snooping" Configuration ....305
Table 153: CLI "Server Screening" Configuration....306
Table 154: CLI "Binding Table" Configuration....306
Table 155: CLI "ARP Inspection" Configuration....307
Table 156: CLI "Filter Table" Configuration....307
Table 157: CLI "Access Control List" Configuration ....307
Table 158: CLI "802.1X" Configuration ....309
Table 159: CLI "Port Security" Configuration....310
Table 160: CLI "Alarm" Configuration....311
Table 161: CLI "Monitor Information" Configuration....311
Table 162: CLI "RMON Statistics" Configuration ....311
Table 163: CLI "SFP Information" Configuration....311
Table 164: CLI "Traffic Monitor" Configuration....312
Table 165: CLI "SNMP" Configuration....313
Table 166: CLI "Auto Provision" Configuration ....314
Table 167: CLI "Mail Alarm" Configuration....314
Table 168: CLI "Maintenance" Configuration ....315
Table 169: CLI "System Log" Configuration....315
Table 170: CLI "System Log" Configuration....316
Table 171: Data Format and Function Code....317
Table 172: MODBUS Registers....317

Table of contents Click a title to access it
Manual assistant
Powered by Anthropic
Waiting for your message
Product information

Brand : Wago

Model : 852-1505

Category : Switch